Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbEthicalhack3rWPVDB-ID:299E5A22-344A-4028-AC60-E04CF1F49676
HistoryDec 02, 2015 - 12:00 a.m.

Users Ultra Membership Plugin <= 1.5.62 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF

2015-12-0200:00:00
ethicalhack3r
wpscan.com
12

EPSS

0.001

Percentile

31.7%

JSON

Both p_name and p_desc are vulnerable. No nonce on form so also vulnerable to CSRF. Original researcher’s PoC does not work as all parameters are needed to be submitted not just the p_name parameter.

Related

prion 3
cve 3
cvelist 3
nvd 3
prion
prion
Design/Logic Flaw
2019-09-20 16:15:00
Design/Logic Flaw
2019-09-20 16:15:00
Cross site request forgery (csrf)
2019-09-20 16:15:00
cve
cve
CVE-2015-9392
2019-09-20 16:15:11
CVE-2015-9394
2019-09-20 16:15:11
CVE-2015-9393
2019-09-20 16:15:11
cvelist
cvelist
CVE-2015-9393
2019-09-20 15:02:48
CVE-2015-9392
2019-09-20 15:01:15
CVE-2015-9394
2019-09-20 15:03:46
nvd
nvd
CVE-2015-9393
2019-09-20 16:15:11
CVE-2015-9394
2019-09-20 16:15:11
CVE-2015-9392
2019-09-20 16:15:11

EPSS

0.001

Percentile

31.7%

JSON
Related for WPVDB-ID:299E5A22-344A-4028-AC60-E04CF1F49676
prion3cve3cvelist3nvd3