CVE-2020-8799 - A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress

Back Back to CVE browser

MEDIUM

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress

Published May 5, 2020

4.8

MEDIUM

CVSS 3.1

EPSS 0.74%

Description

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress. Once the administrator has submitted the data, the script stored is executed for all the users visiting the website.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://wordpress.org/plugins/wti-like-post/#developers
x_refsource_MISCProductThird Party Advisory
https://wpvulndb.com/vulnerabilities/10210
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
https://wordpress.org/plugins/wti-like-post/#developers		x_refsource_MISCProductThird Party Advisory
https://wpvulndb.com/vulnerabilities/10210		x_refsource_CONFIRMThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 5, 2020

Updated Aug 4, 2024

Reserved Feb 7, 2020

Link CVE-2020-8799

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8799

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8799