Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-4063
HistoryMay 27, 2015 - 6:59 p.m.

Cross site scripting

2015-05-2718:59:00
PRIOn knowledge base
www.prio-n.com
8

5.7 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%

Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the where1 parameter in the nsp_search page to wp-admin/admin.php.

CPENameOperatorVersion
newstatpressle0.9.8

5.7 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%