CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11509

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-post action (which will execute in an administrator's browser if the template is used to create a page).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.015

EPSS Ranking 80.5%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2020-11509

Wpleadplus » Wp Lead Plus X » Version: 0.0.1

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.1
Wpleadplus » Wp Lead Plus X » Version: 0.0.2

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.2
Wpleadplus » Wp Lead Plus X » Version: 0.0.3

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.3
Wpleadplus » Wp Lead Plus X » Version: 0.0.4

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.4
Wpleadplus » Wp Lead Plus X » Version: 0.0.5

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.0.5
Wpleadplus » Wp Lead Plus X » Version: 0.98

cpe:2.3:a:wpleadplus:wp_lead_plus_x:0.98

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11509

Products

Pricing

Contact Us