CVE-2015-9355

The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-08-28

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Two-factor-authentication (Simbahosting)

References

• https://wordpress.org/plugins/two-factor-authentication/#developers