AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-9459

MEDIUM · CVSS 5.4 EPSS 1.02%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-02-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-9459
Severity
MEDIUM
CVSS
5.4
EPSS
1.02%
WordPress Java

Original NVD Description

Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to inject arbitrary JavaScript, HTML, or CSS via Ajax actions. This affects mec_save_notifications and import_settings.