CVE-2020-9003

A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress

published February 20, 2020

CVSS
—
EPSS
1%
Percentile
63.8
In the wild
Unconfirmed
What it is

A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01042 · 63.8th percentile
Published
2020-02-20T21:52Z
EPSS history
Timeline
  • 20 FEB 21:52Z
    A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress
    cvelistv5