FancyBox for WordPress 3.0.0-3.0.2 - Stored Cross-Site Scripting (XSS)

🗓️ 22 Feb 2015 00:00:00Reported by ethicalhack3rType

FancyBox for WordPress 3.0.0-3.0.2 Stored Cross-Site Scripting (XSS

Reporter	Title	Published	Views	Family All 9
Check Point Advisories	WordPress FancyBox Plugin Code Injection (CVE-2015-1494)	2 Feb 201500:00	–	checkpoint_advisories
Patchstack	WordPress FancyBox Plugin 3.0.2 - Stored XSS	16 Feb 201500:00	–	patchstack
CVE	CVE-2015-1494	17 Feb 201515:59	–	cve
Tenable Nessus	FancyBox Plugin for WordPress 'mfbfw' Parameter Persistent XSS	16 Feb 201500:00	–	nessus
Prion	Cross site scripting	17 Feb 201515:59	–	prion
Exploit DB	WordPress Plugin Fancybox 3.0.2 - Persistent Cross-Site Scripting	16 Feb 201500:00	–	exploitdb
OpenVAS	FancyBox for WordPress XSS Vulnerability	2 Mar 201500:00	–	openvas
Cvelist	CVE-2015-1494	17 Feb 201515:00	–	cvelist
NVD	CVE-2015-1494	17 Feb 201515:59	–	nvd

Vulners

Node

-fancybox-for-wordpressRange<3.0.4

Source	Link
blog	www.blog.sucuri.net/2015/02/zero-day-in-the-fancybox-for-wordpress-plugin.html
threatpost	www.threatpost.com/following-exploits-zero-day-in-wordpress-plugin-fancybox-patched/110882
vulners	www.vulners.com/exploitdb/EDB-ID:36087

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Feb 2015 00:00Current

1.5Low risk

Vulners AI Score1.5

EPSS0.005

fancybox wordpress plugin vulnerability