CVE-2020-29304

Publicada em 14 dez 2020 · Atualizada em 04 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 5.5%

A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows attackers who have convinced a site administrator to import a specially crafted CSV file to inject arbitrary web script or HTML as the victim is proceeding through the file import workflow.

Produtos afetados

n/a · n/a

Referências

http://packetstormsecurity.com/files/160452/WordPress-DirectoriesPro-1.3.45-Cross-Site-Scripting.html https://directoriespro.com/directories-pro-1-3-46/http://seclists.org/fulldisclosure/2020/Dec/15 https://www.themissinglink.com.au/security-advisories-cve-2020-29304