← All advisories

Medium severity5.4NVD Advisory· Published Sep 3, 2019· Updated Jun 17, 2026

CVE-2019-15870

CVE-2019-15870

Description

The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.

Affected products

3

Scriptsbundle/CarSpot
cpe:2.3:a:scriptsbundle:carspot:*:*:*:*:*:wordpress:*:*
Range: <2.1.7
WordPress/CarSpot themedescription
WordPress/CarSpotllm-fuzzy
Range: <2.1.7

Patches

Vulnerability mechanics

References

1

wpvulndb.com/vulnerabilities/9258nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.