Lucene search
MitreCVELIST:CVE-2015-4413HistoryJun 24, 2015 - 2:00 p.m.
CVE-2015-4413
2015-06-2414:00:00
mitre
www.cve.org
0.002 Low
EPSS
Percentile
54.2%
Cross-site scripting (XSS) vulnerability in the new_fb_sign_button function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirect_to parameter.
References
packetstormsecurity.com/files/132425/WordPress-Nextend-Facebook-Connect-1.5.4-Cross-Site-Scripting.html
seclists.org/fulldisclosure/2015/Jun/70
www.securityfocus.com/bid/75391
plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1178751%40nextend-facebook-connect&old=1060317%40nextend-facebook-connect&sfp_email=&sfph_mail=
wordpress.org/plugins/nextend-facebook-connect/changelog/
Related
cve
cve
CVE-2015-4413
2015-06-24 14:59:02
CVE-2015-4557
2018-04-12 15:29:00
prion
prion
Cross site scripting
2015-06-24 14:59:00
Cross site scripting
2018-04-12 15:29:00
wpvulndb
wpvulndb
Nextend Facebook Connect <= 1.5.4 - Reflected Cross-Site Scripting (XSS)
2015-06-24 00:00:00
nvd
nvd
CVE-2015-4413
2015-06-24 14:59:02
CVE-2015-4557
2018-04-12 15:29:00
cvelist
cvelist
CVE-2015-4557
2018-04-12 15:00:00