Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-01-01T01:25:23
Updated: 2024-08-04T17:16:13.449Z
Reserved: 2021-01-01T00:00:00
Link: CVE-2020-35936
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-01-01T02:15:13.440
Modified: 2021-01-11T21:38:06.217
Link: CVE-2020-35936
Redhat
No data.