CVE-2019-20210 - The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query

MEDIUM

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query

Published Jan 13, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 3.24%

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://cxsecurity.com/issue/WLB-2019120110		x_refsource_MISCExploitThird Party Advisory
https://cxsecurity.com/issue/WLB-2019120111		x_refsource_MISCExploitThird Party Advisory
https://cxsecurity.com/issue/WLB-2019120112		x_refsource_MISCExploitThird Party Advisory
https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727		x_refsource_MISCThird Party Advisory
https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622		x_refsource_MISCThird Party Advisory
https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571		x_refsource_MISCThird Party Advisory
https://wpvulndb.com/vulnerabilities/10013		x_refsource_MISCThird Party Advisory
https://wpvulndb.com/vulnerabilities/10014		x_refsource_MISCThird Party Advisory
https://wpvulndb.com/vulnerabilities/10018		x_refsource_MISCThird Party Advisory