CVE-2019-15870 - The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field

MEDIUM

The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field

Published Sep 3, 2019

5.4

MEDIUM

CVSS 3.0

EPSS 0.74%

The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

https://wpvulndb.com/vulnerabilities/9258
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://wpvulndb.com/vulnerabilities/9258		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 3, 2019

Updated Aug 5, 2024

Reserved Sep 3, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a