PT-2020-10372 · Cththemes · Cththemes Townhub+2

Published 2020-01-13 · Updated 2020-01-14 · CVE-2019-20210

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CTHthemes CityBook versions prior to 2.3.4 CTHthemes TownHub versions prior to 1.0.6 CTHthemes EasyBook versions prior to 1.2.2

Description The issue allows for Reflected XSS via a search query, which can be exploited to inject malicious scripts into a user's session.

Recommendations For CTHthemes CityBook versions prior to 2.3.4, update to version 2.3.4 or later. For CTHthemes TownHub versions prior to 1.0.6, update to version 1.0.6 or later. For CTHthemes EasyBook versions prior to 1.2.2, update to version 1.2.2 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-20210

Affected Products

Cththemes Citybook

Cththemes Easybook

Cththemes Townhub

References · 11

• 🔥 https://cxsecurity.com/issue/WLB-2019120112 · Exploit
• 🔥 https://cxsecurity.com/issue/WLB-2019120111 · Exploit
• 🔥 https://cxsecurity.com/issue/WLB-2019120110 · Exploit
• https://osv.dev/vulnerability/CVE-2019-20210 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20210 · Security Note
• https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571 · Note
• https://wpvulndb.com/vulnerabilities/10018 · Note
• https://wpvulndb.com/vulnerabilities/10013 · Note
• https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727 · Note
• https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622 · Note
• https://wpvulndb.com/vulnerabilities/10014 · Note