PT-2020-20288 · WordPress · Wti Like Post

Published 2020-05-05 · Updated 2020-05-07 · CVE-2020-8799

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WTI Like Post plugin versions through 1.4.5 for WordPress

Description A Stored XSS issue has been found in the administration page of the plugin. Once the administrator has submitted the data, the stored script is executed for all users visiting the website.

Recommendations For versions through 1.4.5, update to a version that contains a fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-8799

Affected Products

Wti Like Post

References · 5

• https://osv.dev/vulnerability/CVE-2020-8799 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8799 · Security Note
• https://wpvulndb.com/vulnerabilities/10210 · Note
• https://t.me/cvenotify/3565 · Telegram Post
• https://wordpress.org/plugins/wti-like-post/#developers · Note