CVE-2020-12054

The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query)

published April 23, 2020

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themes (if the plugin is enabled) by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise PRO, Bold Photography PRO, Intuitive PRO, Devotepress PRO, Clean Blocks PRO, Foodoholic PRO, Catch Mag PRO, Catch Wedding PRO, and Higher Education PRO.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03611 · 89.4th percentile
Published
2020-04-23T12:39Z
EPSS history
Timeline
  • 23 APR 12:39Z
    The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query)
    cvelistv5