VULNERABILITY INTELLIGENCE

CVE-2020-7228

CVSS score5.4 MEDIUM
EPSS probability0.99%
CISA KEVNot currently listed
Published2020-01-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references