documentcloud navis documentcloud vulnerabilities

Latest documentcloud navis documentcloud CVEs

Newest publication first

1. CVE-2015-2807 Navis DocumentCloud < 0.1.1 - Reflected Cross-Site Scripting

   Published 2015-09-01

   Medium·CVSS 4.3

   Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.