Security Advisory

CVE-2017-15811

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-10-23 17:00:00

Last updated 2024-08-05 20:04:50

Assigner mitre

State PUBLISHED

Description

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php.

← Browse all CVEs View on cve.org ↗