MEDIUM
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form
Published Jan 13, 2020
6.1
MEDIUMCVSS 3.1
EPSS 2.58%
Description
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form.
Affected products
Remediation
No remediation recorded yet.
Weaknesses (1)
References (9)
- https://cxsecurity.com/issue/WLB-2019120110 x_refsource_MISCExploitThird Party Advisory
- https://cxsecurity.com/issue/WLB-2019120111 x_refsource_MISCExploitThird Party Advisory
- https://cxsecurity.com/issue/WLB-2019120112 x_refsource_MISCExploitThird Party Advisory
- https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727 x_refsource_MISCThird Party Advisory
- https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622 x_refsource_MISCThird Party Advisory
- https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571 x_refsource_MISCThird Party Advisory
- https://wpvulndb.com/vulnerabilities/10013 x_refsource_MISCThird Party Advisory
- https://wpvulndb.com/vulnerabilities/10014 x_refsource_MISCThird Party Advisory
- https://wpvulndb.com/vulnerabilities/10018 x_refsource_MISCThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://cxsecurity.com/issue/WLB-2019120110 | x_refsource_MISCExploitThird Party Advisory | |
| https://cxsecurity.com/issue/WLB-2019120111 | x_refsource_MISCExploitThird Party Advisory | |
| https://cxsecurity.com/issue/WLB-2019120112 | x_refsource_MISCExploitThird Party Advisory | |
| https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727 | x_refsource_MISCThird Party Advisory | |
| https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622 | x_refsource_MISCThird Party Advisory | |
| https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571 | x_refsource_MISCThird Party Advisory | |
| https://wpvulndb.com/vulnerabilities/10013 | x_refsource_MISCThird Party Advisory | |
| https://wpvulndb.com/vulnerabilities/10014 | x_refsource_MISCThird Party Advisory | |
| https://wpvulndb.com/vulnerabilities/10018 | x_refsource_MISCThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 13, 2020
Updated Aug 5, 2024
Reserved Jan 1, 2020
Link CVE-2019-20212
CISA Vulnrichment
Updated n/a