CVE-2015-10117

MOYENNE 6.1CVE-2015-10117 · Published 06/06/2023 · updated 17/06/2026

En bref

CVE-2015-10117 est une vulnérabilité MOYENNE (CVSS 6.1) touchant gf windcave free (webaware).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.61%, plus élevée que 49.3% des vulnérabilités.
Correctif : mettre à jour vers 1.4.3 ou plus récent.

Package	Affected versions	Patched versions
gf windcave free webaware	`< 1.4.3`	`1.4.3`

Description

A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.4.3 is able to address this issue. The name of the patch is 5966a5e6343e3d5610bdfa126a5cfbae95e629b6. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230664.

References

wp-plugins/gravity-forms-dps-pxpay commit 5966a5e · Patch
wp-plugins/gravity-forms-dps-pxpay release 1.4.3 · Product
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free