Lucene search

K
cvelistMitreCVELIST:CVE-2010-5295
HistoryJan 21, 2014 - 1:00 a.m.

CVE-2010-5295

2014-01-2101:00:00
mitre
www.cve.org
3
wordpress
cross-site scripting
remote attackers
arbitrary web script
html
plugin author field
delete plugin action

AI Score

5.5

Confidence

High

EPSS

0.002

Percentile

55.5%

Cross-site scripting (XSS) vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin’s author field, which is not properly handled during a Delete Plugin action.

AI Score

5.5

Confidence

High

EPSS

0.002

Percentile

55.5%