Lucene search
+L

4 matches found

NVD
NVD
•added 2017/10/23 5:29 p.m.•31 views

CVE-2017-15811

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

5.4CVSS5.4AI score0.0097EPSS
SaveExploits1References3
OSV
OSV
•added 2017/10/23 5:29 p.m.•17 views

CVE-2017-15811

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

5.4CVSS5.8AI score0.0097EPSS
SaveExploits1References3
Prion
Prion
•added 2017/10/23 5:29 p.m.•31 views

Design/Logic Flaw

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

3.5CVSS5.3AI score0.0097EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/23 12:00 a.m.•5 views

CVE-2017-15811: Improper Neutralization of Input During Web Page Generation

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

5.4CVSS5.9AI score0.0097EPSS
SaveExploits1References2
Rows per page
Query Builder