CVE-2020-15299

A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into…

published July 9, 2020

CVSS

—

EPSS

47%

Percentile

98.8

In the wild

Unconfirmed

What it is

A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an install_online_preset AJAX request containing base64-encoded JavaScript (in the kc-online-preset-data POST parameter) that is executed in the victim's browser.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.46960 · 98.8th percentile
Published: 2020-07-09T18:13Z

EPSS history

Timeline

09 JUL 18:13Z
A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into…
cvelistv5