cve/2015/CVE-2015-20019.md

CVE-2015-20019

Description

The Content text slider on post WordPress plugin before 6.9 does not sanitise and escape the Title and Message/Content settings, which could lead to Cross-Site Scripting issues

POC

Reference

• https://seclists.org/bugtraq/2015/Dec/124
• https://wpscan.com/vulnerability/4f92b211-e09c-4ed0-bc98-27e0b51b1f86

Github

• https://github.com/ARPSyndicate/cvemon