CVE-2015-10117 LOW

CVE-2015-10117: Gravity Forms DPS PxPay Plugin cross site scripting

Vendor N/A
Product Gravity Forms DPS PxPay Plugin
Weakness CWE-79 · XSS
Published June 6, 2023
Last update August 6, 2024
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.4.3 is able to address this issue. The name of the patch is 5966a5e6343e3d5610bdfa126a5cfbae95e629b6. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230664.

Key dates

02Disclosure timeline

June 6, 2023 CVE published
August 6, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-1356 Reflected Cross-site Scripting In IDAttend’s IDWeb Application CVE-2025-9952 Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting CVE-2025-55063 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') CVE-2023-27499 Cross-Site Scripting (XSS) vulnerability in SAP GUI for HTML CVE-2024-32558 WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability