Lucene search
N/APATCHSTACK:A2AC19042FCD8BE9DB393ED365B8FB82HistoryJul 16, 2015 - 12:00 a.m.
WordPress Floating Social Bar Plugin <= 1.1.5 - XSS
2015-07-1600:00:00
N/A
patchstack.com
7
0.004 Low
EPSS
Percentile
73.7%
This vulnerability allows an attacker to inject arbitrary web script or HTML via the “items[]” parameter in an fsb_save_order action to wp-admin/admin-ajax.php.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| floating social bar | le | 1.1.5 |
Related
cve
cve
CVE-2015-5528
2015-07-16 15:59:00
nvd
nvd
CVE-2015-5528
2015-07-16 15:59:00
prion
prion
Cross site scripting
2015-07-16 15:59:00
cvelist
cvelist
CVE-2015-5528
2015-07-16 15:00:00
wpvulndb
wpvulndb
Floating Social Bar <= 1.1.5 - Cross-Site Scripting (XSS)
2015-07-07 00:00:00
wpexploit
wpexploit
Floating Social Bar <= 1.1.5 - Cross-Site Scripting (XSS)
2015-07-07 00:00:00