CVE-2015-9420

creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:42+00:00| seen| https://t.me/cibsecurity/7025...

CVE-2015-9420

The CVE concerns the WordPress plugin “soundcloud-is-gold” (pre-2.3.2). The vulnerability is an XSS via wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter, leading to unauthenticated reflected XSS. Affected versions are plugin versions before 2.3.2; the issue is caused by improper ...