4 matches found
CVE-2017-15811
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...
5.4CVSS5.4AI score0.0097EPSS
SaveExploits1References3
CVE-2017-15811
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...
5.4CVSS5.8AI score0.0097EPSS
SaveExploits1References3
Design/Logic Flaw
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...
3.5CVSS5.3AI score0.0097EPSS
SaveExploits1References3Affected Software1
CVE-2017-15811: Improper Neutralization of Input During Web Page Generation
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...
5.4CVSS5.9AI score0.0097EPSS
SaveExploits1References2
20