CVE-2015-2195

Multiple cross-site scripting XSS vulnerabilities in the WP Media Cleaner plugin 2.2.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 paged, or 3 s parameter in the wp-media-cleaner page to wp-admin/upload.php...

CVE-2015-2195

CVE-2015-2195 relates to the WordPress WP Media Cleaner plugin (version 2.2.6). The connected sources confirm multiple cross-site scripting (XSS) vulnerabilities in this plugin that allow remote attackers to inject arbitrary JavaScript/HTML via the view, paged, or s parameters on the wp-media-cle...