Lucene search
PRIOn knowledge basePRION:CVE-2015-2220HistoryMar 05, 2015 - 4:59 p.m.
Cross site scripting
2015-03-0516:59:00
PRIOn knowledge base
www.prio-n.com
2
Multiple cross-site scripting (XSS) vulnerabilities in the Ninja Forms plugin before 2.8.9 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via the ninja_forms_field_1 parameter in a ninja_forms_ajax_submit action to wp-admin/admin-ajax.php or (2) remote administrators to inject arbitrary web script or HTML via the fields[1] parameter to wp-admin/post.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ninja_forms | le | 2.8.8 |
Related
checkpoint_advisories
checkpoint_advisories
WordPress Ninja Forms Plugin Cross-Site Scripting (CVE-2015-2220)
2016-02-01 00:00:00
cve
cve
CVE-2015-2220
2015-03-05 16:59:02
patchstack
patchstack
WordPress Ninja Forms Plugin <= 2.8.8 - Multiple XSS
2015-03-05 00:00:00
cvelist
cvelist
CVE-2015-2220
2015-03-05 16:00:00
nvd
nvd
CVE-2015-2220
2015-03-05 16:59:02
wpvulndb
wpvulndb
Ninja Forms <= 2.8.8 - Stored & Reflected XSS
2015-02-11 00:00:00
kaspersky
kaspersky
KLA10491 Multiple vulnerabilities in WordPress plugins
2015-03-17 00:00:00