CVE-2015-9501 — MEDIUM (6.1)

Q: What is CVE-2015-9501?

CVE-2015-9501 is a vulnerability with a CVSS score of 6.1 (MEDIUM). The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.

Q: How severe is CVE-2015-9501?

CVE-2015-9501 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2015-9501?

Check the references section above for vendor advisories and patch information. Affected products include: Artificial Intelligence Project Artificial Intelligence.

Vulnerability Description

The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Artificial Intelligence Project	Artificial Intelligence	< 1.2.4

Related Weaknesses (CWE)

CWE-79

References

https://github.com/duchenerc/artificial-intelligence/commit/c70631b1f80518411df2PatchThird Party Advisory
https://wpvulndb.com/vulnerabilities/7994Third Party Advisory
https://github.com/duchenerc/artificial-intelligence/commit/c70631b1f80518411df2PatchThird Party Advisory
https://wpvulndb.com/vulnerabilities/7994Third Party Advisory

FAQ

What is CVE-2015-9501?

CVE-2015-9501 is a vulnerability with a CVSS score of 6.1 (MEDIUM). The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.

How severe is CVE-2015-9501?

CVE-2015-9501 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-9501?

Check the references section above for vendor advisories and patch information. Affected products include: Artificial Intelligence Project Artificial Intelligence.