CVE-2015-10093

CVE-2015-10093 affects the WordPress plugin Mark User as Spammer (versions 1.0.0–1.0.1). The vulnerability exists in the user_row_actions function of plugin/plugin.php, where manipulation of the url parameter leads to cross-site scripting. The issue can be triggered remotely and is described with...