CVE-2015-1879 Google Doc Embedder <= 2.5.18 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| google doc embedder | = 2.5.18 | No fix listed |
| wordpress google-document-embedder(WordPress) | < 2.5.19 | 2.5.19 |
References
- packetstormsecurity.com exploit
- 72547 vdb-entry
- wordpress.org patch
- Wordfence Intelligence third-party-advisory
- www.cve.org