← back
CVE-2020-7107

CVE-2020-7107

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 2.2%
exploitation probability
2.2%top 19% of all CVEs
observed exploitation
nono source reports it
The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.
Affected products
n/a · n/a