cbcvebase.

Magic Hills Wonderplugin Audio Player vulnerabilities

1 known vulnerability affecting magic_hills/wonderplugin_audio_player.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2015-2218P4MEDIUMCVSS 4.3PoC≤ 2.02015-03-05
CVE-2015-2218 [MEDIUM] CWE-79 CVE-2015-2218: Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderplugi Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) item[name] or (2) item[customcss] parameter in a wonderplugin_audio_save_item action to wp-admin/admin-a
nvd
Magic Hills Wonderplugin Audio Player vulnerabilities | cvebase