CVE-2015-6805

Cross-site scripting (XSS) vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authenticated users to inject arbitrary web script…

published September 2, 2015

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the message field in a private message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02394 · 83.9th percentile
Published
2015-09-02T14:00Z
EPSS history
Timeline
  • 02 SEP 14:00Z
    Cross-site scripting (XSS) vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authenticated users to inject arbitrary web script…
    cvelistv5