CVE-2020-28650

MEDIUM · CVSS 6.4 EPSS 0.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-28650

Severity

MEDIUM

CVSS

6.4

EPSS

0.69%

WordPress

Original NVD Description

The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and Contributor roles.