Security Advisory

CVE-2015-4338

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-06-17 18:00:00

Last updated 2024-08-06 06:11:12

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language files via a Translation LM_FRONT_* field for a language, as demonstrated by language/italian.php.

← Browse all CVEs View on cve.org ↗