3 matches found
CVE-2015-9396
The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS...
6.1CVSS0.00985EPSS
SaveExploits1References2
CVE-2015-9396: Improper Neutralization of Input During Web Page Generation
The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS...
6.1CVSS6.3AI score0.00985EPSS
SaveExploits1References2
PT-2019-7355
Name of the Vulnerable Software and Affected Versions auto-thickbox-plus plugin versions 1.9 and earlier Description The issue concerns a XSS vulnerability in the auto-thickbox-plus plugin for WordPress. The vulnerability is related to the download.min.php file, specifically the file parameter. T...
6.1CVSS0.00985EPSS
SaveExploits1References5
20