Cross-Site Scripting Vulnerability in Broken Link Checker Plugin by WordPress
CVE-2015-5057

6.1MEDIUM

Key Information:

Vendor
Wordpress
Status
Broken Link Checker
Vendor
CVE Published:
18 August 2017

Summary

A Cross-Site Scripting (XSS) vulnerability has been identified in the WordPress admin panel linked to the Broken Link Checker plugin versions prior to 1.10.9. This vulnerability allows attackers to insert potentially malicious scripts through modified headers, leading to unauthorized actions or data exposure within the administrator interface. Site administrators are strongly urged to upgrade to the latest version to ensure robust protection against this security threat.

References

https://wordpress.org/plugins/broken-link-checker/#develo...
x_refsource_MISC
http://www.openwall.com/lists/oss-security/2015/06/25/1
mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/75421
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.