CVE-2015-5529 Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to dashboard/settings/...

MediumCVSS 4.3 EPSS 4.0%

Published: 2015-07-16 18:00
Updated: 2026-06-17 03:29
Exploit status: No public exploit known

Description

Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to dashboard/settings/categories/, (2) title or (3) rel parameter to dashboard/settings/links/, or (4) url parameter to dashboard/tools/pingservers/.

Affected products

Product	Affected versions	Fixed in
freereprintables articlefr	= 3.0.6	No fix listed

References

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.97% (percentile 90.6)
CWE: CWE-79

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

ArticleFR 3.0.6 - Multiple Vulnerabilities Exploit · Exploit Database (OffSec) · 2015-07-13