CVE-2015-3429

Cross-site scripting (XSS) vulnerability in example.html in Genericons before 3.3.1, as used in WordPress before 4.2.2, allows remote attackers to inject arbitrary web script or HTML via a fragment identifier.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

3.80% chance of exploitation in the next 30 days, 89th percentile

Nuclei

medium

Published

2015-06-17

Updated

2024-08-06

Proof-of-concept exploits (1)

• fdiwan000/Wordpress_exploit_using_Kali_Linux0★ · 2021-03-08

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2015/CVE-2015-3429-wordpress-57…

References

• CVE Record
• NVD entry

Related

• CVE-2015-3425
• CVE-2015-3438
• CVE-2015-3424
• CVE-2015-3439
• CVE-2015-3423
• CVE-2015-3440