Wp Symposium@* Security Vulnerabilities and Issues — Wp Symposium@* CVE List

Lucene search

WpsymposiumproWp Symposium*

3 matches found

CVE•added 2014/12/24 6:59 p.m.•47 views

CVE-2014-8810

SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tray parameter in a getMailMessage action.

6.5CVSS8.1AI score0.03371EPSS

CVE•added 2014/12/24 6:59 p.m.•33 views

CVE-2014-8809

Multiple cross-site scripting (XSS) vulnerabilities in the WP Symposium plugin before 14.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter in an addComment action to ajax/profile_functions.php, (2) compose_text parameter in a sendMail action t...

4.3CVSS6AI score0.00357EPSS

CVE•added 2014/03/28 3:55 p.m.•30 views

CVE-2013-2695

Cross-site scripting (XSS) vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inject arbitrary web script or HTML via the u parameter.

4.3CVSS6AI score0.00271EPSS