CVE-2016-1000140
MEDIUM NUCLEIWordPress Plugin New-Year-Firework <1.1.9 - XSS
Title source: llmDescription
Reflected XSS in wordpress plugin new-year-firework v1.1.9
Nuclei Templates (1)
WordPress New Year Firework <=1.1.9 - Cross-Site Scripting
MEDIUMby daffainfo
Scores
CVSS v3
6.1
EPSS
0.0658
EPSS Percentile
91.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
new-year-firework_project/new-year-firework
< 1.1.9
Published
Oct 10, 2016
Tracked Since
Feb 18, 2026