CVEDB API

The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 81.6%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2015-9414

Wpsymposiumpro » Wp-Symposium » Version: N/A

cpe:2.3:a:wpsymposiumpro:wp-symposium:-
Wpsymposiumpro » Wp-Symposium » Version: 14.10

cpe:2.3:a:wpsymposiumpro:wp-symposium:14.10
Wpsymposiumpro » Wp-Symposium » Version: 14.11

cpe:2.3:a:wpsymposiumpro:wp-symposium:14.11
Wpsymposiumpro » Wp-Symposium » Version: 14.12

cpe:2.3:a:wpsymposiumpro:wp-symposium:14.12
Wpsymposiumpro » Wp-Symposium » Version: 15.1

cpe:2.3:a:wpsymposiumpro:wp-symposium:15.1
Wpsymposiumpro » Wp-Symposium » Version: 15.4

cpe:2.3:a:wpsymposiumpro:wp-symposium:15.4
Wpsymposiumpro » Wp-Symposium » Version: 15.5

cpe:2.3:a:wpsymposiumpro:wp-symposium:15.5
Wpsymposiumpro » Wp-Symposium » Version: 15.5.1

cpe:2.3:a:wpsymposiumpro:wp-symposium:15.5.1
Wpsymposiumpro » Wp-Symposium » Version: 15.8

cpe:2.3:a:wpsymposiumpro:wp-symposium:15.8
Wpsymposiumpro » Wp-Symposium » Version: 15.8.1

cpe:2.3:a:wpsymposiumpro:wp-symposium:15.8.1