CVE-2020-35933 in Newsletter Plugin
요약
\~에 의해 MITRE • 2021. 01. 01.
A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a tnpc_render AJAX request containing either JavaScript in an options parameter, or a base64-encoded JSON string containing JavaScript in the encoded_options parameter.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.