← All advisories

Medium severity6.1NVD Advisory· Published Oct 23, 2017· Updated Jun 17, 2026

CVE-2017-15810

CVE-2017-15810

Description

The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Popcash/Popcash.net Code Integration Tool
cpe:2.3:a:popcash:popcash.net_code_integration_tool:*:*:*:*:*:wordpress:*:*
Range: <=1.0
WordPress/Popcashnet Code Integration Toolllm-fuzzy
Range: <1.1
Package: https://wordpress.org/plugins/popcashnet-code-integration-tool

Patches

Vulnerability mechanics

References

3

packetstormsecurity.com/files/144583/WordPress-PopCash.Net-Publisher-Code-Integration-1.0-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
wordpress.org/plugins/popcashnet-code-integration-tool/nvdRelease NotesThird Party Advisory
wpvulndb.com/vulnerabilities/8936nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.