PT-2019-7317 · WordPress · Feedwordpress

Quassy · Published 2019-08-28 · Updated 2019-09-03 · CVE-2015-9358

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions feedwordpress plugin versions prior to 2015.0514

Description The issue concerns a cross-site scripting (XSS) problem. It is related to the use of add query arg() and remove query arg() functions.

Recommendations For versions prior to 2015.0514, update to version 2015.0514 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-9358

Affected Products

Feedwordpress

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-9358 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9358 · Note
• https://t.me/cibsecurity/6514 · Telegram Post
• https://wordpress.org/plugins/feedwordpress/#developers · Note