CVE-2015-1385

概要

参考情報

• packetstormsecurity.com/files/130155/Blubrry-PowerPress-6.0-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Jan/130 · Exploit
• securityfocus.com/archive/1/534577/100/0/threaded
• securityfocus.com/bid/72362
• wordpress.org/plugins/powerpress/changelog · Vendor Advisory
• netsparker.com/cve-2015-1385-xss-vulnerability-in-blubrry-powerpress · Exploit

powerpress のその他の脆弱性

• CVE-2024-9227中 4.8The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a …
• CVE-2024-9230中 5.9The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a …
• CVE-2023-41239中 6.5Server-Side Request Forgery (SSRF) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry.This issue affects PowerPress Podcasting…
• CVE-2023-4820中 5.4The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which…
• CVE-2023-30778中 5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry plugin <= 10.0.1 ver…