Lucene search

K
cvelistMitreCVELIST:CVE-2015-4063
HistoryMay 27, 2015 - 6:00 p.m.

CVE-2015-4063

2015-05-2718:00:00
mitre
www.cve.org

5.3 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%

Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the where1 parameter in the nsp_search page to wp-admin/admin.php.

5.3 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%