CVE-2015-9420

The CVE concerns the WordPress plugin “soundcloud-is-gold” (pre-2.3.2). The vulnerability is an XSS via wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter, leading to unauthenticated reflected XSS. Affected versions are plugin versions before 2.3.2; the issue is caused by improper ...

CVE-2012-6624

The CVE concerns the SoundCloud Is Gold WordPress plugin (v2.1) where a Cross-Site Scripting (XSS) flaw exists in the width parameter of the soundcloud_is_gold_player_preview action to wp-admin/admin-ajax.php. This allows remote attackers to inject arbitrary script/HTML in the context of affected...