← All advisories

Medium severity6.1NVD Advisory· Published Sep 14, 2020· Updated Jun 17, 2026

CVE-2020-25378

CVE-2020-25378

Description

Wordpress Plugin Store / AccessPress Themes WP Floating Menu V1.3.0 is affected by: Cross Site Scripting (XSS) via the id GET parameter.

Affected products

3

AccessPress Themes/WP Floating Menudescription
AccessPress Themes/Wp Floating Menu
cpe:2.3:a:accesspressthemes:wp_floating_menu:1.3.0:*:*:*:*:wordpress:*:*
WordPress/WP Floating Menullm-fuzzy
Range: <=1.3.0

Patches

Vulnerability mechanics

References

1

zeroaptitude.com/misha/wordpress-plugin-bug-hunting-part-2/nvdExploitThird Party AdvisoryURL Repurposed

News mentions

0

No linked articles in our index yet.