CVE-2015-10006 LOW

CVE-2015-10006: admont28 Ingnovarq insertarSliderAjax.php cross site scripting

Vendor Admont28
Product Ingnovarq
Weakness CWE-79 · XSS
Published January 1, 2023
Last update April 10, 2025
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is 9d18a39944d79dfedacd754a742df38f99d3c0e2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217172.

Key dates

02Disclosure timeline

January 1, 2023 CVE published
April 10, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-44025 WordPress NiceJob plugin < 3.6.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-13283 Facets - Critical - Cross Site Scripting - SA-CONTRIB-2024-047 CVE-2023-24386 WordPress AI Contact Us Form Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) CVE-2025-22719 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability CVE-2026-47973 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)