CVE-2015-2084

State: Published
Severity: Not scored
Published: Feb 25, 2015
Updated: Aug 6, 2024
Reserved: Feb 25, 2015

Description

Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the image_file parameter in an edit action in the cnss_social_icon_add page to wp-admin/admin.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20150221 Easy Social Icons WordPress plugin v1.2.2 Persistent XSS and CSRFmailing-list
http://packetstormsecurity.com/files/130461/WordPress-Easy-Social-Icons-1.2.2-CSRF-XSS.html
36161exploit
https://wordpress.org/plugins/easy-social-icons/changelog/
74893vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.