CVE-2015-9433

MEDIUM

wp-social-bookmarking-light < 1.7.10 - CSRF with Resultant XSS via Configuration Parameters

Title source: llm

Description

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php.

References (3)

Core 3

Core References

Exploit, Third Party Advisory x_refsource_misc

https://wpvulndb.com/vulnerabilities/8252

Product, Release Notes x_refsource_misc

https://wordpress.org/plugins/wp-social-bookmarking-light/#developers

Exploit, Third Party Advisory x_refsource_misc

http://cinu.pl/research/wp-plugins/mail_58e88633599b7b2fc0f44ce6fa7ff27d.html

Scores

CVSS v3 6.5

EPSS 0.0086

EPSS Percentile 54.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

CWE

CWE-352

Status published

Products (1)

wp_social_bookmarking_light_project/wp_social_bookmarking_light < 1.7.10

Published Sep 26, 2019

Tracked Since Feb 18, 2026