CVE-2015-8350

Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web…

published September 11, 2017

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab parameter in a wp_cta_global_settings action to wp-admin/edit.php or (2) wp-cta-variation-id parameter to ab-testing-call-to-action-example/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02645 · 85.5th percentile
Published
2017-09-11T20:00Z
EPSS history
Timeline
  • 11 SEP 20:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web…
    cvelistv5