CVE-2015-3299: XSS
Published Sep 19, 2017
·Updated
Cross-site scripting (XSS) vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to original service order.
Affected Software
1 affected component
Floating Social Bar Project Floating Social Bar Wordpress<=1.1.6
Remediation
Event History
Sep 19, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3299?
CVE-2015-3299 is classified as a medium severity cross-site scripting vulnerability.
2
How do I fix CVE-2015-3299?
To fix CVE-2015-3299, update the Floating Social Bar plugin to version 1.1.7 or later.
3
What causes the CVE-2015-3299 vulnerability?
CVE-2015-3299 is caused by improper validation of user input in the Floating Social Bar plugin.
4
Who is affected by CVE-2015-3299?
Anyone using Floating Social Bar plugin versions prior to 1.1.7 on WordPress is affected by CVE-2015-3299.
5
Can CVE-2015-3299 be exploited remotely?
Yes, CVE-2015-3299 can be exploited remotely, allowing attackers to inject arbitrary scripts.