Description
The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter.
Unscored
CVE-2015-9436
EUVD-2015-9276GHSA-f3rf-2wrm-7mv6
The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id paramet…
Published Sep 26, 2019 · Updated Aug 6, 2024 · Assigned by mitre