Lucene search
PRIOn knowledge basePRION:CVE-2017-15811HistoryOct 23, 2017 - 5:29 p.m.
Design/Logic Flaw
2017-10-2317:29:00
PRIOn knowledge base
www.prio-n.com
7
0.001 Low
EPSS
Percentile
32.1%
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pootle_button | eq | 1.1.1 | |
| pootle_button | eq | 1.1.0 | |
| pootle_button | eq | 1.0.0 |
Related
cve
cve
CVE-2017-15811
2017-10-23 17:29:00
wpexploit
wpexploit
pootle button <= 1.1.1 - Authenticated Cross-Site Scripting (XSS)
2017-10-12 00:00:00
nvd
nvd
CVE-2017-15811
2017-10-23 17:29:00
wpvulndb
wpvulndb
pootle button <= 1.1.1 - Authenticated Cross-Site Scripting (XSS)
2017-10-12 00:00:00
cvelist
cvelist
CVE-2017-15811
2017-10-23 17:00:00