The feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and remove_query_arg().
References
Link | Resource |
---|---|
https://wordpress.org/plugins/feedwordpress/#developers | Release Notes Third Party Advisory |
https://wordpress.org/plugins/feedwordpress/#developers | Release Notes Third Party Advisory |
Configurations
History
21 Nov 2024, 02:40
Type | Values Removed | Values Added |
---|---|---|
References | () https://wordpress.org/plugins/feedwordpress/#developers - Release Notes, Third Party Advisory |
Information
Published : 2019-08-28 12:15
Updated : 2024-11-21 02:40
NVD link : CVE-2015-9358
Mitre link : CVE-2015-9358
CVE.ORG link : CVE-2015-9358
JSON object : View
Products Affected
feedwordpress_project
- feedwordpress
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')