Lucene search

[email protected]CVE-2015-9433

HistorySep 26, 2019 - 2:15 a.m.

CVE-2015-9433

2019-09-2602:15:10

CWE-352

[email protected]

web.nvd.nist.gov

117

cve

2015

9433

wp-social-bookmarking-light

plugin

wordpress

csrf

xss

security

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.002 Low

EPSS

Percentile

56.4%

JSON

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php.

Affected configurations

NVD

Node

wp_social_bookmarking_light_projectwp_social_bookmarking_lightRange<1.7.10wordpress

CPENameOperatorVersion
wp_social_bookmarking_light_project:wp_social_bookmarking_lightwp social bookmarking light project wp social bookmarking lightlt1.7.10

CPE	Name	Operator	Version
wp_social_bookmarking_light_project:wp_social_bookmarking_light	wp social bookmarking light project wp social bookmarking light	lt	1.7.10

References

cinu.pl/research/wp-plugins/mail_58e88633599b7b2fc0f44ce6fa7ff27d.html

wordpress.org/plugins/wp-social-bookmarking-light/#developers

wpvulndb.com/vulnerabilities/8252

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.002 Low

EPSS

Percentile

56.4%

JSON

Related for CVE-2015-9433

cvelist1 prion1 wpvulndb1 nvd1