NVD

Id
26625  
Name
CVE-2015-5485  
Description
Cross-site scripting (XSS) vulnerability in the Event Import page (import-eventbrite-events.php) in the Modern Tribe Eventbrite Tickets plugin before 3.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "error" parameter to wp-admin/edit.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-08-18  
Modified Date
2015-08-19  
Seq
2015-5485  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140884 26625 CVE-2015-5485 http://packetstormsecurity.com/files/132676/The-Events-Calender-Eventbrite-Tickets-3.9.6-Cross-Site-Scripting.html  View
140885 26625 CVE-2015-5485 20150713 Reflected XSS in The Events Calendar: Eventbrite Tickets allows unauthenticated users to do almost anything an admin can (WordPress plugin)  View
140886 26625 CVE-2015-5485 https://security.dxw.com/advisories/reflected-xss-in-the-events-calendar-eventbrite-tickets-allows-unauthenticated-users-to-do-almost-anything-an-admin-can/  View
140887 26625 CVE-2015-5485 https://theeventscalendar.com/release-eventbrite-tickets-3-10-2/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8989 JVNDB-2015-004309 WordPress 用 Modern Tribe Eventbrite Tickets プラグインの Event Import ページにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 Modern Tribe Eventbrite Tickets プラグインの Event Import ページ (import-eventbrite-events.php) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-5485 82710 CVE-2015-5485 26625 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004309.html 2015-07-09 2015-08-24 View