CVE-2020-8799

—

CVSS 3.1

4.8 medium

EPSS

<1%p53

Published

May 5, 2020 (May 5, 2020)

Modified

Jun 17, 2026

Description

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress. Once the administrator has submitted the data, the script stored is executed for all the users visiting the website.

Vendors: webtechideas
Products: wti like post
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.