CVE-2020-13459: XSS
Published May 25, 2020
·Updated
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.
Affected Software
2 affected componentsFixes available
verbb Image Resizer Craft Cms<2.0.9
composer/verbb/image-resizer<2.0.9
2.0.9
Event History
May 25, 2020
CVE Published
via MITRE·04:33 PM
Data Sourced
via MITRE·04:33 PM
Description
May 24, 2022
Advisory Published
via GitHub·05:18 PM
Frequently Asked Questions
1
What is the severity of CVE-2020-13459?
CVE-2020-13459 is classified as a high severity vulnerability due to its potential for stored XSS attacks.
2
How do I fix CVE-2020-13459?
To fix CVE-2020-13459, update the Image Resizer plugin to version 2.0.9 or later.
3
What type of vulnerability is CVE-2020-13459?
CVE-2020-13459 is a stored cross-site scripting (XSS) vulnerability.
4
Which software is affected by CVE-2020-13459?
CVE-2020-13459 affects the Image Resizer plugin for Craft CMS versions prior to 2.0.9.
5
What can an attacker do with CVE-2020-13459?
An attacker can exploit CVE-2020-13459 to execute malicious scripts in the context of a user’s browser.