CVE-2015-6920

NUCLEI

sourceAFRICA 0.1.3 - Cross-Site Scripting via wpbase Parameter

Title source: llm

Exploitation Summary

CVE-2015-6920 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

Cross-site scripting (XSS) vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter.

Nuclei Templates (1)

WordPress sourceAFRICA <=0.1.3 - Cross-Site Scripting

MEDIUMby daffainfo

References (2)

Core 2

Core References

Exploit x_refsource_misc

http://packetstormsecurity.com/files/133371/WordPress-sourceAFRICA-0.1.3-Cross-Site-Scripting.html

Third Party Advisory x_refsource_misc

https://wpvulndb.com/vulnerabilities/8169

Scores

EPSS 0.0031

EPSS Percentile 54.4%

Details

CWE

CWE-79

Status published

Products (1)

sourceafrica_project/sourceafrica 0.1.3

Published Sep 11, 2015

Tracked Since Feb 18, 2026