CVE-2017-20008: myCRED < 1.7.8 - Reflected Cross-Site Scripting
Published Nov 29, 2021
·Updated
The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected Cross-Site Scripting
Affected Software
1 affected component
Mycred myCred WordPress<1.7.8
Event History
Nov 29, 2021
CVE Published
via MITRE·08:25 AM
Data Sourced
via MITRE·08:25 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-20008?
The severity of CVE-2017-20008 is medium with a severity value of 6.1.
2
How does CVE-2017-20008 affect the myCred WordPress plugin?
CVE-2017-20008 affects the myCred WordPress plugin before version 1.7.8.
3
What is the vulnerability in CVE-2017-20008?
CVE-2017-20008 is a Reflected Cross-Site Scripting vulnerability in the myCred WordPress plugin.
4
How can I fix CVE-2017-20008?
To fix CVE-2017-20008, update the myCred WordPress plugin to version 1.7.8 or higher.
5
Where can I find more information about CVE-2017-20008?
You can find more information about CVE-2017-20008 at the following references: [1] [2]