CVE-2015-9299: XSS
Published Aug 13, 2019
·Updated
The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
Affected Software
2 affected components
Pixelite Events Manager Wordpress<5.5.7.1
Wp-events-plugin Events Manager Wordpress<5.5.7.1
Event History
Aug 13, 2019
CVE Published
via MITRE·04:42 PM
Data Sourced
via MITRE·04:42 PM
Description
Frequently Asked Questions
1
What is CVE-2015-9299?
CVE-2015-9299 refers to a vulnerability in the events-manager plugin for WordPress that allows for DOM XSS (Cross-site Scripting) attacks.
2
What is the severity of CVE-2015-9299?
The severity of CVE-2015-9299 is medium with a CVSS score of 6.1.
3
How does CVE-2015-9299 affect WordPress?
CVE-2015-9299 affects WordPress through the events-manager plugin, allowing attackers to perform DOM XSS attacks.
4
How do I fix CVE-2015-9299?
To fix CVE-2015-9299, update the events-manager plugin to version 5.5.7.1 or higher.
5
Where can I find more information about CVE-2015-9299?
You can find more information about CVE-2015-9299 on the WordPress plugin page for events-manager at: https://wordpress.org/plugins/events-manager/#developers