CVE-2015-9336: XSS
Published Aug 22, 2019
·Updated
The clean-login plugin before 1.5.1 for WordPress has reflected XSS.
Affected Software
1 affected component
codection Clean Login Wordpress<1.5.1
Event History
Aug 22, 2019
CVE Published
via MITRE·12:20 PM
Data Sourced
via MITRE·12:20 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-9336?
The severity of CVE-2015-9336 is medium with a severity value of 6.1.
2
What is CVE-2015-9336?
CVE-2015-9336 is a reflected XSS vulnerability in the clean-login plugin before version 1.5.1 for WordPress.
3
How does CVE-2015-9336 affect WordPress websites?
CVE-2015-9336 affects WordPress websites that have the clean-login plugin installed before version 1.5.1.
4
What is the CWE ID for CVE-2015-9336?
The CWE ID for CVE-2015-9336 is 79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
5
How can I fix CVE-2015-9336?
To fix CVE-2015-9336, update the clean-login plugin to version 1.5.1 or above.