Lucene search
HistoryJun 30, 2015 - 2:59 p.m.
CVE-2015-5151
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
52.0%
Cross-site scripting (XSS) vulnerability in the Slider Revolution (revslider) plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the client_action parameter in a revslider_ajax_action action to wp-admin/admin-ajax.php.
Affected configurations
Node
themepunchslider_revolutionMatch4.2.2wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| themepunch | slider_revolution | 4.2.2 | cpe:2.3:a:themepunch:slider_revolution:4.2.2:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site scripting
2015-06-30 14:59:00
patchstack
patchstack
WordPress Slider Revolution Plugin <= 4.2.2 - XSS
2015-06-30 00:00:00
openvas
openvas
WordPress Revslider Multiple Vulnerabilities
2016-05-23 00:00:00
cvelist
cvelist
CVE-2015-5151
2015-06-30 14:00:00
cve
cve
CVE-2015-5151
2015-06-30 14:59:08
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
52.0%
Related for NVD:CVE-2015-5151