CVE-2020-28976
The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF.
- Affected products
- Canto
- Canto
- = 1.3.0
- CVSS 3.1
- 5.3 MEDIUM
- EPSS
- 27.8% (98th percentile)
- Weakness
- CWE-918
- NVD status
- Modified
- Published
- 2020-11-30
CVE-2020-28976 at NVD
3 known exploits for CVE-2020-28976
Proof-of-concept code and exploit modules indexed by Sploitus