CVEvulnerability
CVE-2015-1436
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the (1) easingslider_manage_customizations or (2) easingslider_edit_sliders page to wp-admin/admin.php.
Affected configurations
• easing slider project easing slider (<= 2.2.0.6)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/130355/WordPress-Easing-Slider-2.2.0.6-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/534680/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/72572 Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100861 VDB Entry
- https://wordpress.org/plugins/easing-slider/changelog/ Patch, Release Notes
- https://www.htbridge.com/advisory/HTB23249 Exploit
- http://packetstormsecurity.com/files/130355/WordPress-Easing-Slider-2.2.0.6-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/534680/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/72572 Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100861 VDB Entry
- https://wordpress.org/plugins/easing-slider/changelog/ Patch, Release Notes
- https://www.htbridge.com/advisory/HTB23249 Exploit