Lucene search
PRIOn knowledge basePRION:CVE-2015-20105HistoryDec 02, 2021 - 6:15 p.m.
Cross site scripting
2021-12-0218:15:00
PRIOn knowledge base
www.prio-n.com
1
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could also lead to Stored Cross-Site Scripting issues
| CPE | Name | Operator | Version |
|---|---|---|---|
| clickbank_affiliate_ads | le | 1.20 |
Related
cve
cve
CVE-2015-20105
2021-12-02 18:15:08
patchstack
patchstack
cnvd
cnvd
WordPress Cross-Site Scripting Vulnerability (CNVD-2021-100244)
2021-12-06 00:00:00
nvd
nvd
CVE-2015-20105
2021-12-02 18:15:08
cvelist
cvelist