NVD

Id
23757  
Name
CVE-2015-1436  
Description
Cross-site scripting (XSS) vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the (1) easingslider_manage_customizations or (2) easingslider_edit_sliders page to wp-admin/admin.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-02-16  
Modified Date
2015-02-17  
Seq
2015-1436  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126318 23757 CVE-2015-1436 http://packetstormsecurity.com/files/130355/WordPress-Easing-Slider-2.2.0.6-Cross-Site-Scripting.html  View
126319 23757 CVE-2015-1436 20150211 Two Reflected XSS Vulnerabilities in Easing Slider WordPress Plugin  View
126320 23757 CVE-2015-1436 72572  View
126321 23757 CVE-2015-1436 wp-easingslider-cve20151436-xss(100861)  View
126322 23757 CVE-2015-1436 https://wordpress.org/plugins/easing-slider/changelog/  View
126323 23757 CVE-2015-1436 https://www.htbridge.com/advisory/HTB23249  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6188 JVNDB-2015-001508 WordPress 用 Easing Slider プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 Easing Slider プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-1436 78661 CVE-2015-1436 23757 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001508.html 2015-01-22 2015-02-19 View