← Back to CVE List

CVE-2020-36656

Published: 2023-02-21T09:15Z
Last Modified: 2024-11-21T05:30Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing contributors to conduct stored XSS attacks via the plugin's Gutenberg blocks. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt