CVE-2015-20000 to CVE-2015-20999

13 CVEs with public proof-of-concept exploits.

• CVE-2015-200191 PoCContent text slider on post < 6.9 - Authenticated Stored Cross-Site Scripting (XSS)
• CVE-2015-200673 PoCsWP Attachment Export < 0.2.4 - Unauthenticated Posts Download
• CVE-2015-201053 PoCsClickBank Affiliate Ads <= 1.20 - CSRF to Stored Cross-Site Scripting
• CVE-2015-201061 PoCClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site Scripting
• CVE-2015-201131 PoCRealtyScript 4.0.2 Multiple Cross-Site Request Forgery and Persistent Cross-Site Scripting Vulnerabilities
• CVE-2015-201141 PoCRealtyScript 4.0.2 Cross-Site Scripting via Multiple Parameters
• CVE-2015-201151 PoCRealtyScript 4.0.2 Stored Cross-Site Scripting via File Upload Parameter
• CVE-2015-201161 PoCRealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload Filename
• CVE-2015-201171 PoCRealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation
• CVE-2015-201181 PoCRealtyScript 4.0.2 Stored Cross-Site Scripting via location_name Parameter
• CVE-2015-201191 PoCRealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.php
• CVE-2015-201201 PoCRealtyScript 4.0.2 Multiple Time-based Blind SQL Injection
• CVE-2015-201211 PoCRealtyScript 4.0.2 SQL Injection via u_id and agent Parameters