XSS in Cyberhobo Geo Mashup
CVE-2015-1383
Cross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search key.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.020 (78.2th percentile) — read the EPSS interpretation.
Affected products
- Cyberhobo Geo_mashup
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
Frequently asked questions
- What is CVE-2015-1383?
- CVE-2015-1383 is a vulnerability in Cyberhobo Geo Mashup, classified under Cross-site Scripting. Published 2015-02-02.
- Is CVE-2015-1383 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.