CVE-2020-15535

MEDIO 6.1CVE-2020-15535 · Published 05/07/2020 · updated 17/06/2026

En resumen

CVE-2020-15535 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a car rental system (bestsoftinc).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 67.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
car rental system bestsoftinc	`≤ 1.3`	No fix yet

Description

An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields.

References

packetstormsecurity.com/files/157118/WordPress-Car-Rental-System-1.3-Cross-Site-Scripting.html · Exploit
wpvulndb.com/vulnerabilities/10172 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free