CVE-2015-7357

Опубликовано: 03 окт. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the uDesign (aka U-Design) theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by #.

Ссылки

http://packetstormsecurity.com/files/133867/WordPress-U-Design-Theme-2.7.9-Cross-Site-Scripting.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/Oct/25
Mailing List
Third Party Advisory
http://themeforest.net/item/udesign-responsive-wordpress-theme/253220
Third Party Advisory
https://wpvulndb.com/vulnerabilities/8177
Third Party Advisory
http://packetstormsecurity.com/files/133867/WordPress-U-Design-Theme-2.7.9-Cross-Site-Scripting.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/Oct/25
Mailing List
Third Party Advisory
http://themeforest.net/item/udesign-responsive-wordpress-theme/253220
Third Party Advisory
https://wpvulndb.com/vulnerabilities/8177
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:udesign_project:udesign:2.3.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.3.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.2:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.3:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.4:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.5:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.6:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.7:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.8:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.9:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.10:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.11:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.12:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.13:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.14:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.15:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.16:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.17:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.18:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.4.19:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.5.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.5.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.5.2:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.5.3:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.5.4:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.5.5:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.5.6:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.6.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.2:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.3:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.4:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.5:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.6:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.7:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.8:*:*:*:*:wordpress:*:*

cpe:2.3:a:udesign_project:udesign:2.7.9:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 56%

0.00335

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-qp5q-8hr2-86c9