PT-2020-14485 · Bestsoftinc+1 · Car Rental System+1

Published 2020-07-05 · Updated 2020-07-08 · CVE-2020-15535

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions bestsoftinc Car Rental System plugin versions through 1.3 for WordPress

Description An issue in the bestsoftinc Car Rental System plugin allows persistent XSS to occur via any of the registration fields.

Recommendations For bestsoftinc Car Rental System plugin versions through 1.3, consider disabling the registration functionality until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-15535

Affected Products

Car Rental System

Wordpress

References · 5

• 🔥 https://packetstormsecurity.com/files/157118/WordPress-Car-Rental-System-1.3-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-15535 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15535 · Security Note
• https://t.me/cvenotify/4855 · Telegram Post
• https://wpvulndb.com/vulnerabilities/10172 · Note