Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.1
CVE-2020-15364: The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.
CVE-2020-15364 · published 6 years ago
Summary
The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| nexos_project | nexos |
<= 1.7 cpe:2.3:a:nexos_project:nexos:*:*:*:*:*:wordpress:*:* |
Original advisory text
The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.
The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.
References
- http://packetstormsecurity.com/files/158510/WordPress-NexosReal-Estate-Theme-1.7... Exploit Third Party Advisory VDB Entry
- https://github.com/vladvector/vladvector.github.io/blob/master/exploit/2020-06-1... Exploit Third Party Advisory
- https://themeforest.net/item/nexos-real-estate-agency-directory/21126242 Product Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published28 Jun 2020
Updated23 Oct 2026
First seen29 Sep 2026
Sources
CVE-2020-15364 · NVD
Track software like this
Free during beta