CVE-2015-9312

CVE-2015-9312 affects the WordPress plugin NewStatPress prior to 1.0.5 (observed in templates and RedHat/NVD entries). The vulnerability is a cross-site scripting (XSS) flaw in includes/nsp_search.php where GET parameters are used unsafely, with outputs escaping issues that allow injected script....

CVE-2015-9312

The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element...