CVE-2015-10093 — LOW (2.6) — White Hats Nepal

Vulnerability Description

A vulnerability was found in Mark User as Spammer Plugin 1.0.0/1.0.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function user_row_actions of the file plugin/plugin.php. The manipulation of the argument url leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 1.0.2 is able to address this issue. The identifier of the patch is e7059727274d2767c240c55c02c163eaa4ba6c62. It is recommended to upgrade the affected component. The identifier VDB-222325 was assigned to this vulnerability.

CVSS Score

2.6

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Mark User As Spammer Project	Mark User As Spammer	1.0.0

Related Weaknesses (CWE)

CWE-79

References

https://github.com/korobochkin/mark-user-as-spammer/commit/e7059727274d2767c240cPatch
https://github.com/korobochkin/mark-user-as-spammer/releases/tag/v1.0.2Release Notes
https://vuldb.com/?ctiid.222325Third Party Advisory
https://vuldb.com/?id.222325Third Party Advisory
https://github.com/korobochkin/mark-user-as-spammer/commit/e7059727274d2767c240cPatch
https://github.com/korobochkin/mark-user-as-spammer/releases/tag/v1.0.2Release Notes
https://vuldb.com/?ctiid.222325Third Party Advisory
https://vuldb.com/?id.222325Third Party Advisory

FAQ

What is CVE-2015-10093?

CVE-2015-10093 is a vulnerability with a CVSS score of 2.6 (LOW). A vulnerability was found in Mark User as Spammer Plugin 1.0.0/1.0.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function user_row_actions of the file plug...

How severe is CVE-2015-10093?

CVE-2015-10093 has been rated LOW with a CVSS base score of 2.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-10093?

Check the references section above for vendor advisories and patch information. Affected products include: Mark User As Spammer Project Mark User As Spammer.