CVE-2020-7107: XSS
Published Jan 16, 2020
·Updated
The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via DisplayFAQ to Shortcodes/DisplayFAQs.php.
Affected Software
1 affected component
Etoilewebdesign Ultimate Faq Wordpress<1.8.30
Remediation
Event History
Jan 16, 2020
CVE Published
via MITRE·04:01 AM
Data Sourced
via MITRE·04:01 AM
Description
Data Sourced
via NVD·05:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2020-7107.
2
What is the severity of CVE-2020-7107?
The severity of CVE-2020-7107 is medium with a severity value of 6.1.
3
What is affected by CVE-2020-7107?
The Ultimate FAQ plugin before version 1.8.30 for WordPress is affected by CVE-2020-7107.
4
How can an attacker exploit CVE-2020-7107?
An attacker can exploit CVE-2020-7107 by using XSS (Cross-Site Scripting) via the Display_FAQ to Shortcodes/DisplayFAQs.php.
5
How can I fix CVE-2020-7107?
To fix CVE-2020-7107, update the Ultimate FAQ plugin to version 1.8.30 or newer.