CVE

Id
79366  
CVE No.
CVE-2015-2089  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the CrossSlide jQuery (crossslide-jquery-plugin-for-wordpress) plugin 2.0.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) csj_width, (3) csj_height, (4) csj_sleep, (5) csj_fade, or (6) upload_image parameter in the thisismyurl_csj.php page to wp-admin/options-general.php.  
Phase
Assigned (20150226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
721654 79366 CVE-2015-2089 MISC:http://packetstormsecurity.com/files/130313/WordPress-Cross-Slide-2.0.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html  View
721655 79366 CVE-2015-2089 BID:74894  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8030 JVNDB-2015-003350 Crypto++ の rw.cpp の InvertibleRWFunction::CalculateInverse 関数における秘密鍵を取得される脆弱性 Crypto++ (libcrypt++) の rw.cpp の InvertibleRWFunction::CalculateInverse 関数は、Rabin-Williams デジタル署名アルゴリズムの秘密鍵の操作を適切に非可視化しないため、秘密鍵を取得される脆弱性が存在します。 CVE-2015-2141 79366 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003350.html  View