CVE-2020-8594

Katalog CVE

CVSS 5.4 · Medium EPSS 1,2%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada ninjaforms ninja forms. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms[date_format].

Rincian

Terbit di NVD

14 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wordpress.org/plugins/ninja-forms/#developers advisory vendor
• https://spider-security.co.uk/blog-cve-cve-2020-8594 exploit · advisory pihak ketiga
• https://wpvulndb.com/vulnerabilities/10070 advisory pihak ketiga