CVE-2015-1494

Mô tả

Tham khảo

• blog.sucuri.net/2015/02/zero-day-in-the-fancybox-for-wordpress-plugin.html · Third Party Advisory
• osvdb.org/show/osvdb/118543 · Broken Link
• exploit-db.com/exploits/36087 · Exploit
• openwall.com/lists/oss-security/2015/02/05/10 · Mailing List
• securityfocus.com/bid/72506 · Third Party Advisory
• plugins.trac.wordpress.org/changeset/1082625 · Issue Tracking
• wordpress.org/plugins/fancybox-for-wordpress/changelog · Patch
• wordpress.org/support/topic/possible-malware-2 · Exploit

Lỗ hổng khác của fancybox

• CVE-2025-3662TRUNG BÌNH 6.1The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries' capti…
• CVE-2024-0662TRUNG BÌNH 4.8The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 d…