First published: Thu Jan 05 2023(Updated: )
A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function taxonomy_switcher_init of the file taxonomy-switcher.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.4 is able to address this issue. It is recommended to upgrade the affected component. VDB-217446 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Webdevstudios Taxonomy Switcher | <1.0.4 | |
<1.0.4 |
https://github.com/WebDevStudios/taxonomy-switcher/commit/e1a0d99f936e7427b31e210c67aeb4833d804099
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-10013 has been classified as problematic due to its potential for cross-site scripting attacks.
To mitigate CVE-2015-10013, you should update the taxonomy-switcher plugin to version 1.0.4 or later.
CVE-2015-10013 affects versions of the taxonomy-switcher plugin up to 1.0.3 on WordPress.
CVE-2015-10013 is a vulnerability that leads to cross-site scripting (XSS).
The vulnerability in CVE-2015-10013 is found in the function taxonomy_switcher_init in the taxonomy-switcher.php file.