CVE-2015-10127
3.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Summary
A vulnerability was found in PlusCaptcha Plugin up to 2.0.6 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.14 is able to address this issue. The patch is identified as 1274afc635170daafd38306487b6bb8a01f78ecd. It is recommended to upgrade the affected component. VDB-248954 is the identifier assigned to this vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | PlusCaptcha Plugin | 2.0.0 | affected |
| n/a | PlusCaptcha Plugin | 2.0.1 | affected |
| n/a | PlusCaptcha Plugin | 2.0.2 | affected |
| n/a | PlusCaptcha Plugin | 2.0.3 | affected |
| n/a | PlusCaptcha Plugin | 2.0.4 | affected |
| n/a | PlusCaptcha Plugin | 2.0.5 | affected |
| n/a | PlusCaptcha Plugin | 2.0.6 | affected |
Weaknesses
- CWE-79: CWE-79 Cross Site Scripting
ADP Enrichment
CVE Program Container
Additional References
- https://vuldb.com/?id.248954
- https://vuldb.com/?ctiid.248954
- https://github.com/wp-plugins/pluscaptcha/commit/1274afc635170daafd38306487b6bb8a01f78ecd
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://vuldb.com/?id.248954
- https://vuldb.com/?ctiid.248954
- https://github.com/wp-plugins/pluscaptcha/commit/1274afc635170daafd38306487b6bb8a01f78ecd
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.