CVE-2015-9306: XSS
Published Aug 12, 2019
·Updated
The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS.
Affected Software
1 affected component
Smackcoders Import All Pages\, Post Types\, Products\, Orders\, And Users As Xml \& Csv Wordpress<3.8.1
Event History
Aug 12, 2019
CVE Published
via MITRE·02:41 PM
Data Sourced
via MITRE·02:41 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2015-9306.
2
What is the severity of CVE-2015-9306?
The severity of CVE-2015-9306 is medium with a CVSS score of 6.1.
3
Which software is affected by CVE-2015-9306?
The wp-ultimate-csv-importer plugin before version 3.8.1 for WordPress is affected by CVE-2015-9306.
4
What is the Common Weakness Enumeration (CWE) for CVE-2015-9306?
The Common Weakness Enumeration (CWE) for CVE-2015-9306 is CWE-79.
5
Where can I find more information about CVE-2015-9306?
You can find more information about CVE-2015-9306 on the WordPress plugin page: https://wordpress.org/plugins/wp-ultimate-csv-importer/#developers.