CVE-2015-9349
NONE EPSS 55.6%
Published Aug 27, 20196y ago · Modified Jun 17, 20262w ago
Published Aug 27, 2019 6y ago
Last Modified Jun 17, 2026 2w ago
Description
The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser.
Threat Intelligence
EPSS Exploit Probability
55.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| cksource | ckeditor | * | <4.5.3.1 |
References 1
- wordpress.org https://wordpress.org/plugins/ckeditor-for-wordpress/#developers
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.