CVE-2019-20211 - The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, Job or Position, Description, Service Name, Address, Latitude, Longitude, Phone Number, or Website

Back Back to CVE browser

MEDIUM

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, Job or Position, Description, Service Name, Address, Latitude, Longitude, Phone Number, or Website

Published Jan 13, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 2.58%

Description

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, Job or Position, Description, Service Name, Address, Latitude, Longitude, Phone Number, or Website.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (10)

https://cxsecurity.com/issue/WLB-2019120110
x_refsource_MISCExploitThird Party Advisory
https://cxsecurity.com/issue/WLB-2019120111
x_refsource_MISCExploitThird Party Advisory
https://cxsecurity.com/issue/WLB-2019120112
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10765
Advisory
https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727
x_refsource_MISCThird Party Advisory
https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622
x_refsource_MISCThird Party Advisory
https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571
x_refsource_MISCThird Party Advisory
https://wpvulndb.com/vulnerabilities/10013
x_refsource_MISCThird Party Advisory
https://wpvulndb.com/vulnerabilities/10014
x_refsource_MISCThird Party Advisory
https://wpvulndb.com/vulnerabilities/10018
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://cxsecurity.com/issue/WLB-2019120110		x_refsource_MISCExploitThird Party Advisory
https://cxsecurity.com/issue/WLB-2019120111		x_refsource_MISCExploitThird Party Advisory
https://cxsecurity.com/issue/WLB-2019120112		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10765		Advisory
https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727		x_refsource_MISCThird Party Advisory
https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622		x_refsource_MISCThird Party Advisory
https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571		x_refsource_MISCThird Party Advisory
https://wpvulndb.com/vulnerabilities/10013		x_refsource_MISCThird Party Advisory
https://wpvulndb.com/vulnerabilities/10014		x_refsource_MISCThird Party Advisory
https://wpvulndb.com/vulnerabilities/10018		x_refsource_MISCThird Party Advisory