CVE-2020-36626
Last modified
CVE-2020-36626 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function add_post_content_filtered_to_search_sql of the file ModularContent/SearchFilter.php. EPSS estimates a 0.56% chance of exploitation in the next 30 days.
Description
A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function add_post_content_filtered_to_search_sql of the file ModularContent/SearchFilter.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 4528d4f855dbbf24e9fc12a162fda84ce3bedc2f. It is recommended to apply a patch to fix this issue. VDB-216738 is the identifier assigned to this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tri | Panel Builder | < 2020-05-08 |
References
- https://github.com/moderntribe/panel-builder/commit/4528d4f855dbbf24e9fc12a162fda84ce3bedc2fPatch, Third Party Advisory
- https://github.com/moderntribe/panel-builder/pull/173Exploit, Patch, Third Party Advisory
- https://vuldb.com/?id.216738Third Party Advisory
- https://github.com/moderntribe/panel-builder/commit/4528d4f855dbbf24e9fc12a162fda84ce3bedc2fPatch, Third Party Advisory
- https://github.com/moderntribe/panel-builder/pull/173Exploit, Patch, Third Party Advisory
- https://vuldb.com/?id.216738Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-36626?
How severe is CVE-2020-36626?
How do I fix CVE-2020-36626?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-36620A vulnerability was found in Brondahl EnumStringValues up to…7.5
- CVE-2020-36621A vulnerability, which was classified as problematic, has be…6.1
- CVE-2020-36622A vulnerability was found in sah-comp bienlein and classifie…6.5
- CVE-2020-36623A vulnerability was found in Pengu. It has been declared as …6.5
- CVE-2020-36624A vulnerability was found in ahorner text-helpers up to 1.0.…6.1
- CVE-2020-36625A vulnerability was found in destiny.gg chat. It has been ra…8.8
- CVE-2020-36627A vulnerability was found in Macaron i18n. It has been decla…6.1
- CVE-2020-36628A vulnerability classified as critical has been found in Cal…9.8
- CVE-2020-36629A vulnerability classified as critical was found in SimbCo h…7.5
- CVE-2020-3663Buffer over-write may occur during fetching track decoder sp…9.8
- CVE-2020-36630A vulnerability was found in FreePBX cdr 14.0. It has been c…9.8
- CVE-2020-36631A vulnerability was found in barronwaffles dwc_network_serve…9.8
Are you affected by CVE-2020-36626?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
