CVE

Id
79361  
CVE No.
CVE-2015-2084  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the image_file parameter in an edit action in the cnss_social_icon_add page to wp-admin/admin.php.  
Phase
Assigned (20150225)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
721638 79361 CVE-2015-2084 EXPLOIT-DB:36161  View
721639 79361 CVE-2015-2084 URL:http://www.exploit-db.com/exploits/36161  View
721640 79361 CVE-2015-2084 FULLDISC:20150221 Easy Social Icons WordPress plugin v1.2.2 Persistent XSS and CSRF  View
721641 79361 CVE-2015-2084 URL:http://seclists.org/fulldisclosure/2015/Feb/76  View
721642 79361 CVE-2015-2084 MISC:http://packetstormsecurity.com/files/130461/WordPress-Easy-Social-Icons-1.2.2-CSRF-XSS.html  View
721643 79361 CVE-2015-2084 CONFIRM:https://wordpress.org/plugins/easy-social-icons/changelog/  View
721644 79361 CVE-2015-2084 BID:74893  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9396 JVNDB-2015-004716 HP ArcSight Logger における認可ポリシーを回避される脆弱性 HP ArcSight Logger には、認可ポリシーを回避される脆弱性が存在します。 CVE-2015-2136 79361 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004716.html  View