CVE-2019-15870
NONE EPSS 49.8%
Published Sep 3, 20196y ago ยท Modified Jun 17, 20262w ago
Published Sep 3, 2019 6y ago
Last Modified Jun 17, 2026 2w ago
Description
The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.
Threat Intelligence
EPSS Exploit Probability
49.8% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| scriptsbundle | carspot | * | <2.1.7 |
References 1
- wpvulndb.com https://wpvulndb.com/vulnerabilities/9258
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.