CVE-2015-5714

Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags.

CVSS v3.0

6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

6.94% chance of exploitation in the next 30 days, 94th percentile

Nuclei

medium

Published

2016-05-22

Updated

2024-08-06

Proof-of-concept exploits (1)

• ahmedj98/Pentesting-Unit-70★ · 2021-11-03

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2015/CVE-2015-5714-wordpress-4c…

References

• CVE Record
• NVD entry

Related

• CVE-2015-5622
• CVE-2015-5623
• CVE-2017-6817
• CVE-2015-5696
• CVE-2015-5715
• CVE-2015-5688