Detections
Analytics
CVE-2019-20211
medium
Description
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, Job or Position, Description, Service Name, Address, Latitude, Longitude, Phone Number, or Website.
References
https://wpvulndb.com/vulnerabilities/10018
https://wpvulndb.com/vulnerabilities/10014
https://wpvulndb.com/vulnerabilities/10013
https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571
https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622
https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727