Stored XSS Vulnerability in WTI Like Post Plugin for WordPress
CVE-2020-8799

4.8MEDIUM

Key Information:

Vendor

Wordpress
Status
Wti Like Post
Vendor
CVE Published:
5 May 2020

What is CVE-2020-8799?

A Stored Cross-Site Scripting (XSS) vulnerability exists in the WTI Like Post plugin for WordPress, specifically in the administration page. This issue allows an attacker to insert malicious scripts that are stored within the application. When an administrator submits data, the injected script can then be executed by unsuspecting users who visit the affected website. This could lead to unauthorized actions or access to confidential information when users interact with the compromised site.

References

https://wordpress.org/plugins/wti-like-post/#developers
x_refsource_MISC
https://wpvulndb.com/vulnerabilities/10210
x_refsource_CONFIRM

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.