CVE-2015-6805

Cross-site scripting (XSS) vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the message field in a private message.

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

2.39% chance of exploitation in the next 30 days, 83th percentile

Published

2015-09-02

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/37907

References

• CVE Record
• NVD entry

Related

• CVE-2015-6787
• CVE-2015-6809
• CVE-2015-6764
• CVE-2015-6810
• CVE-2015-6763
• CVE-2015-6811