Vulnerability Description
Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) plugin before 4.4.6 for WordPress.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tipsandtricks-Hq | Wp Security \& Firewall | < 4.4.6 |
Related Weaknesses (CWE)
References
- https://github.com/Arsenal21/all-in-one-wordpress-security/commit/4130906bc049b1PatchThird Party Advisory
- https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developersRelease NotesThird Party Advisory
- https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-pluginProductThird Party Advisory
- https://github.com/Arsenal21/all-in-one-wordpress-security/commit/4130906bc049b1PatchThird Party Advisory
- https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developersRelease NotesThird Party Advisory
- https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-pluginProductThird Party Advisory
FAQ
What is CVE-2020-29171?
CVE-2020-29171 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) plugin before 4.4.6 f...
How severe is CVE-2020-29171?
CVE-2020-29171 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-29171?
Check the references section above for vendor advisories and patch information. Affected products include: Tipsandtricks-Hq Wp Security \& Firewall.