CVE-2015-9494

CVE-2015-9494 affects the WordPress plugin indieweb-post-kinds (versions prior to 1.3.1.1). It enables a DOM-based XSS via the genericons/example.html anchor identifier, allowing injected script to run in a victim’s browser when that anchor is processed. PoC demonstrates the vulnerability. Remedi...