blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2020-25375

MEDIUM 5.4 CVSS 3.1
Published
September 14, 2020
Last modified
June 17, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-79
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field, Email field, and Skype field.

Affected products and versions

  • n/a n/a — Versions not specified
  • softrade wp_smart_crm_\&_invoices — Version 1.8.7

References

  • zeroaptitude.com https://zeroaptitude.com/misha/wordpress-plugin-bug-hunting-part-2 Exploit, Third Party Advisory, URL Repurposed
  • nvd.nist.gov Official NVD record