Vulnerability Description
A vulnerability was found in meitar Inline Google Spreadsheet Viewer Plugin up to 0.9.6 on WordPress and classified as problematic. Affected by this issue is the function displayShortcode of the file inline-gdocs-viewer.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 0.9.6.1 is able to address this issue. The patch is identified as 2a8057df8ca30adc859cecbe5cad21ac28c5b747. It is recommended to upgrade the affected component. VDB-230234 is the identifier assigned to this vulnerability.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Inline Google Spreadsheet Viewer Project | Inline Google Spreadsheet Viewer | <= 0.9.6 |
Related Weaknesses (CWE)
References
- https://github.com/wp-plugins/inline-google-spreadsheet-viewer/commit/2a8057df8cPatch
- https://github.com/wp-plugins/inline-google-spreadsheet-viewer/releases/tag/0.9.Release Notes
- https://vuldb.com/?ctiid.230234Permissions RequiredThird Party Advisory
- https://vuldb.com/?id.230234Permissions RequiredThird Party Advisory
- https://github.com/wp-plugins/inline-google-spreadsheet-viewer/commit/2a8057df8cPatch
- https://github.com/wp-plugins/inline-google-spreadsheet-viewer/releases/tag/0.9.Release Notes
- https://vuldb.com/?ctiid.230234Permissions RequiredThird Party Advisory
- https://vuldb.com/?id.230234Permissions RequiredThird Party Advisory
FAQ
What is CVE-2015-10108?
CVE-2015-10108 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability was found in meitar Inline Google Spreadsheet Viewer Plugin up to 0.9.6 on WordPress and classified as problematic. Affected by this issue is the function displayShortcode of the file ...
How severe is CVE-2015-10108?
CVE-2015-10108 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-10108?
Check the references section above for vendor advisories and patch information. Affected products include: Inline Google Spreadsheet Viewer Project Inline Google Spreadsheet Viewer.