Lucene search
Henri SaloPATCHSTACK:5A006C525F2FA7691DA1B27C8789494BHistoryMay 31, 2015 - 12:00 a.m.
WordPress WP Smiley Plugin <= 1.4.1 - XSS
2015-05-3100:00:00
Henri Salo
patchstack.com
5
EPSS
0.001
Percentile
40.0%
This vulnerability allows an authenticated user to inject arbitrary web script or HTML via the “s4w-more” parameter to wp-admin/options-general.php.
Solution
Update the plugin.
Related
cve
cve
CVE-2015-4139
2015-06-18 18:59:02
prion
prion
Cross site scripting
2015-06-18 18:59:00
cvelist
cvelist
CVE-2015-4139
2015-06-18 18:00:00
nvd
nvd
CVE-2015-4139
2015-06-18 18:59:02
wpvulndb
wpvulndb
WP Smiley <= 1.4.1 - CSRF & Cross-Site Scripting (XSS)
2015-05-29 00:00:00