CVE-2015-9420 SoundCloud Is Gold <= 2.3.1 - Reflected Cross-Site Scripting
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mightymess soundcloud is gold | < 2.3.2 | 2.3.2 |
| wordpress soundcloud-is-gold(WordPress) | < 2.3.2 | 2.3.2 |
References
- cinu.pl exploit third-party-advisory
- wordpress.org product release-notes
- wpvulndb.com exploit third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org