CVE-2020-7228

—

CVSS 3.1

5.4 medium

EPSS

<1%p60

Published

Jan 22, 2020 (Jan 22, 2020)

Modified

Jun 17, 2026

Description

The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user.

Vendors: codepeople
Products: calculated fields form
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.