CVE-2015-7666

MEDIO 6.1CVE-2015-7666 · Published 27/12/2017 · updated 17/06/2026

En resumen

CVE-2015-7666 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a payment form for paypal pro (codepeople).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 78.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
payment form for paypal pro codepeople	`≤ 1.0.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in the (1) cp_updateMessageItem and (2) cp_deleteMessageItem functions in cp_ppp_admin_int_message_list.inc.php in the Payment Form for PayPal Pro plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the cal parameter.

References

securityfocus.com/archive/1/536602/100/0/threaded · Third Party Advisory
plugins.trac.wordpress.org/changeset/1254452/payment-form-for-paypal-pro · Third Party Advisory
wordpress.org/plugins/payment-form-for-paypal-pro · Release Notes
wpvulndb.com/vulnerabilities/8210 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free