CVE-2019-20204

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginning and a crafted SVG element

published January 1, 2020

CVSS
—
EPSS
3%
Percentile
88.7
In the wild
Unconfirmed
What it is

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginning and a crafted SVG element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03376 · 88.7th percentile
Published
2020-01-01T21:59Z
EPSS history
Timeline
  • 01 JAN 21:59Z
    The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginning and a crafted SVG element
    cvelistv5