What’s Vulnerable › Vulnerabilities

CVE-2020-15364

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-06-28 · updated 2026-06-17
• Weakness: CWE-79

Description

The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.

Affected products

• Nexos Project Nexos: through 1.7

References

• http://packetstormsecurity.com/files/158510/WordPress-NexosReal-Estate-Theme-1.7-Cross-Site-Scripting-SQL-Injection.html
• https://github.com/vladvector/vladvector.github.io/blob/master/exploit/2020-06-17-nexos-real-estate-wordpress-theme-v1-7.txt
• https://themeforest.net/item/nexos-real-estate-agency-directory/21126242
• http://packetstormsecurity.com/files/158510/WordPress-NexosReal-Estate-Theme-1.7-Cross-Site-Scripting-SQL-Injection.html
• https://github.com/vladvector/vladvector.github.io/blob/master/exploit/2020-06-17-nexos-real-estate-wordpress-theme-v1-7.txt
• https://themeforest.net/item/nexos-real-estate-agency-directory/21126242

Get alerted when CVE-2020-15364 or the next vulnerability affects your stack