CVE-2020-15038

5.4MEDIUM

Key Information:

Vendor
Wordpress
Status
Coming Soon Page\, Under Construction \& Maintenance Mode
Vendor
CVE Published:
24 June 2020

Summary

The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.

References

https://wordpress.org/plugins/coming-soon/#developers
x_refsource_MISC
https://www.getastra.com/blog/911/plugin-exploit/stored-x...
x_refsource_MISC
https://www.jinsonvarghese.com/stored-xss-coming-soon-mai...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.