CVE-2015-1204

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP Slimstat
Vendor
CVE Published:
21 January 2015

Summary

Cross-site scripting (XSS) vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fs[resource] parameter in the wp-slim-view-2 page to wp-admin/admin.php.

References

https://wordpress.org/plugins/wp-slimstat/changelog/
x_refsource_CONFIRM
http://secunia.com/advisories/62034
third-party-advisoryx_refsource_SECUNIA
https://wpvulndb.com/vulnerabilities/7744
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.