CVE-2020-29303

A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arbitrary web script…

published December 14, 2020

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arbitrary web script or HTML via a POST to /wp-admin/admin.php?page=drts/directories&q=%2F with _drts_form_build_id parameter containing the XSS payload and _t_ parameter set to an invalid or non-existent CSRF token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01953 · 80.1th percentile
Published
2020-12-14T19:43Z
EPSS history
Timeline
  • 14 DEC 19:43Z
    A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arbitrary web script…
    cvelistv5