Lucene search
Morten NørtoftPATCHSTACK:8BDA4DF74FB75337A867D02E3135D563HistoryFeb 19, 2015 - 12:00 a.m.
WordPress Google Document Embedder Plugin <= 2.5.18 - XSS
2015-02-1900:00:00
Morten Nørtoft
patchstack.com
6
EPSS
0.002
Percentile
53.4%
This vulnerability allows an attacker to inject arbitrary web script or HTML via the “profile” parameter in the gde-settings page to wp-admin/options-general.php.
Solution
Upgrade the plugin.
Related
cve
cve
CVE-2015-1879
2022-10-03 16:15:51
prion
prion
Cross site scripting
2015-02-19 15:59:00
nvd
nvd
CVE-2015-1879
2015-02-19 15:59:20
wpvulndb
wpvulndb
Google Doc Embedder <= 2.5.18 - Cross-Site Scripting (XSS)
2015-02-22 00:00:00
cvelist
cvelist
CVE-2015-1879
2022-10-03 16:15:51
checkpoint_advisories
checkpoint_advisories
WordPress Google Doc Embedder Plugin Cross-Site Scripting (CVE-2015-1879)
2015-03-01 00:00:00
kaspersky
kaspersky
KLA10491 Multiple vulnerabilities in WordPress plugins
2015-03-17 00:00:00