CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-8350

Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab parameter in a wp_cta_global_settings action to wp-admin/edit.php or (2) wp-cta-variation-id parameter to ab-testing-call-to-action-example/.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 61.8%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2015-8350

Inboundnow » Call To Action » Version: 1.2.0

cpe:2.3:a:inboundnow:call_to_action:1.2.0
Inboundnow » Call To Action » Version: 1.2.1

cpe:2.3:a:inboundnow:call_to_action:1.2.1
Inboundnow » Call To Action » Version: 1.2.2

cpe:2.3:a:inboundnow:call_to_action:1.2.2
Inboundnow » Call To Action » Version: 1.2.3

cpe:2.3:a:inboundnow:call_to_action:1.2.3
Inboundnow » Call To Action » Version: 1.2.4

cpe:2.3:a:inboundnow:call_to_action:1.2.4
Inboundnow » Call To Action » Version: 1.2.5

cpe:2.3:a:inboundnow:call_to_action:1.2.5
Inboundnow » Call To Action » Version: 1.3.0

cpe:2.3:a:inboundnow:call_to_action:1.3.0
Inboundnow » Call To Action » Version: 1.3.1

cpe:2.3:a:inboundnow:call_to_action:1.3.1
Inboundnow » Call To Action » Version: 1.3.3

cpe:2.3:a:inboundnow:call_to_action:1.3.3
Inboundnow » Call To Action » Version: 2.0.0

cpe:2.3:a:inboundnow:call_to_action:2.0.0
Inboundnow » Call To Action » Version: 2.0.1

cpe:2.3:a:inboundnow:call_to_action:2.0.1
Inboundnow » Call To Action » Version: 2.0.2

cpe:2.3:a:inboundnow:call_to_action:2.0.2
Inboundnow » Call To Action » Version: 2.0.4

cpe:2.3:a:inboundnow:call_to_action:2.0.4
Inboundnow » Call To Action » Version: 2.0.6

cpe:2.3:a:inboundnow:call_to_action:2.0.6
Inboundnow » Call To Action » Version: 2.0.7

cpe:2.3:a:inboundnow:call_to_action:2.0.7
Inboundnow » Call To Action » Version: 2.0.8

cpe:2.3:a:inboundnow:call_to_action:2.0.8
Inboundnow » Call To Action » Version: 2.0.9

cpe:2.3:a:inboundnow:call_to_action:2.0.9
Inboundnow » Call To Action » Version: 2.1.1

cpe:2.3:a:inboundnow:call_to_action:2.1.1
Inboundnow » Call To Action » Version: 2.1.2

cpe:2.3:a:inboundnow:call_to_action:2.1.2
Inboundnow » Call To Action » Version: 2.1.3

cpe:2.3:a:inboundnow:call_to_action:2.1.3
Inboundnow » Call To Action » Version: 2.2.0

cpe:2.3:a:inboundnow:call_to_action:2.2.0
Inboundnow » Call To Action » Version: 2.2.1

cpe:2.3:a:inboundnow:call_to_action:2.2.1
Inboundnow » Call To Action » Version: 2.2.2

cpe:2.3:a:inboundnow:call_to_action:2.2.2
Inboundnow » Call To Action » Version: 2.2.3

cpe:2.3:a:inboundnow:call_to_action:2.2.3
Inboundnow » Call To Action » Version: 2.2.5

cpe:2.3:a:inboundnow:call_to_action:2.2.5
Inboundnow » Call To Action » Version: 2.2.6

cpe:2.3:a:inboundnow:call_to_action:2.2.6
Inboundnow » Call To Action » Version: 2.2.7

cpe:2.3:a:inboundnow:call_to_action:2.2.7
Inboundnow » Call To Action » Version: 2.2.8

cpe:2.3:a:inboundnow:call_to_action:2.2.8
Inboundnow » Call To Action » Version: 2.2.9

cpe:2.3:a:inboundnow:call_to_action:2.2.9
Inboundnow » Call To Action » Version: 2.3.1

cpe:2.3:a:inboundnow:call_to_action:2.3.1
Inboundnow » Call To Action » Version: 2.3.2

cpe:2.3:a:inboundnow:call_to_action:2.3.2
Inboundnow » Call To Action » Version: 2.3.3

cpe:2.3:a:inboundnow:call_to_action:2.3.3
Inboundnow » Call To Action » Version: 2.3.4

cpe:2.3:a:inboundnow:call_to_action:2.3.4
Inboundnow » Call To Action » Version: 2.3.5

cpe:2.3:a:inboundnow:call_to_action:2.3.5
Inboundnow » Call To Action » Version: 2.3.7

cpe:2.3:a:inboundnow:call_to_action:2.3.7
Inboundnow » Call To Action » Version: 2.3.8

cpe:2.3:a:inboundnow:call_to_action:2.3.8
Inboundnow » Call To Action » Version: 2.3.9

cpe:2.3:a:inboundnow:call_to_action:2.3.9
Inboundnow » Call To Action » Version: 2.4.0

cpe:2.3:a:inboundnow:call_to_action:2.4.0
Inboundnow » Call To Action » Version: 2.4.2

cpe:2.3:a:inboundnow:call_to_action:2.4.2
Inboundnow » Call To Action » Version: 2.4.3

cpe:2.3:a:inboundnow:call_to_action:2.4.3
Inboundnow » Call To Action » Version: 2.5

cpe:2.3:a:inboundnow:call_to_action:2.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-8350

Products

Pricing

Contact Us