CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects WordPress, Java. Its EPSS score suggests a 47.0% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2020-15299
Severity
MEDIUM
CVSS
6.1
EPSS
46.96%
WordPress Java
Original NVD Description
A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an install_online_preset AJAX request containing base64-encoded JavaScript (in the kc-online-preset-data POST parameter) that is executed in the victim's browser.
Related CVEs
Other vulnerabilities affecting the same vendor(s)