CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11508

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbitrary JavaScript via the wp_ajax_core37_lp_save_page (aka core37_lp_save_page) AJAX action.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 38.5%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

Products affected by CVE-2020-11508

Wpleadplus » Wp Lead Plus X » Version: 0.0.1

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.1
Wpleadplus » Wp Lead Plus X » Version: 0.0.2

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.2
Wpleadplus » Wp Lead Plus X » Version: 0.0.3

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.3
Wpleadplus » Wp Lead Plus X » Version: 0.0.4

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.4
Wpleadplus » Wp Lead Plus X » Version: 0.0.5

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.5
Wpleadplus » Wp Lead Plus X » Version: 0.98

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.98

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11508

Products

Pricing

Contact Us