CVE-2015-2195

CVE-2015-2195 relates to the WordPress WP Media Cleaner plugin (version 2.2.6). The connected sources confirm multiple cross-site scripting (XSS) vulnerabilities in this plugin that allow remote attackers to inject arbitrary JavaScript/HTML via the view, paged, or s parameters on the wp-media-cle...

WordPress WP Media Cleaner Plugin <= 2.2.6 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via the "s", "paged" or "view" parameters in the wp-media-cleaner page to wp-admin/upload.php. Solution Update the plugin...

Wordpress Media Cleaner plugin 'wp-media-cleaner.php' has multiple cross-site scripting vulnerabilities

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation, which supports setting up personal blog sites on servers with PHP and MySQL.Media Cleaner is one of the plugins that helps to clean the uploaded directories and media libraries. Wordpres...

WordPress Media Cleaner 2.2.6 Cross Site Scripting

Exploit Title: Wordpress Media Cleaner - XSS Author: İsmail SAYGILI Web Site: www.ismailsaygili.com.tr E-Mail: [email protected] Date: 2015-02-26 Plugin Download: https://downloads.wordpress.org/plugin/wp-media-cleaner.2.2.6.zip Version: 2.2.6 Vulnerable Files: + wp-media-cleaner.php...