Cross-Site Scripting Vulnerability in PopCash.Net Code Integration Tool for WordPress
CVE-2017-15810

6.1MEDIUM

Key Information:

Vendor

Wordpress
Status
Popcash.net Code Integration Tool
Vendor
CVE Published:
23 October 2017

What is CVE-2017-15810?

The PopCash.Net Code Integration Tool plugin for WordPress prior to version 1.1 has a Cross-Site Scripting (XSS) vulnerability. This occurs through the manipulation of the 'tab' parameter when accessing 'wp-admin/admin.php', allowing attackers to inject malicious scripts. This security issue can lead to unauthorized actions on behalf of the users, making it a serious risk for sites using this plugin. It is crucial for system administrators to upgrade to the latest version to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://packetstormsecurity.com/files/144583/WordPress-Po...
x_refsource_MISC
https://wordpress.org/plugins/popcashnet-code-integration...
x_refsource_MISC
https://wpvulndb.com/vulnerabilities/8936
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.