Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-7228

The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user.

Published

2020-01-22T15:15:11.677

Last Modified

2024-11-21T05:36:52.510

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

6.8

Impact Score

2.9

Weaknesses

Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	codepeople	calculated_fields_form	≤ 1.0.353	Yes

References

https://spider-security.co.uk/blog-cve-2020-7228 Third Party Advisory ([email protected])
https://wordpress.org/plugins/calculated-fields-form/#developers Third Party Advisory ([email protected])
https://wpvulndb.com/vulnerabilities/10043 Third Party Advisory ([email protected])
https://spider-security.co.uk/blog-cve-2020-7228 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://wordpress.org/plugins/calculated-fields-form/#developers Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://wpvulndb.com/vulnerabilities/10043 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)