CVE-2015-4338

Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language…

published June 17, 2015

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language files via a Translation LM_FRONT_* field for a language, as demonstrated by language/italian.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02300 · 83.1th percentile
Published
2015-06-17T18:00Z
EPSS history
Timeline
  • 17 JUN 18:00Z
    Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language…
    cvelistv5