Vulnerabilities > Wpsymposiumpro > WP Symposium > 14.11
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-09-26 | CVE-2015-9414 | Cross-site Scripting vulnerability in Wpsymposiumpro Wp-Symposium The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter. | 4.3 |
| 2015-01-13 | CVE-2014-10021 | Arbitrary File Upload vulnerability in Wpsymposiumpro WP Symposium 14.11 Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/. | 7.5 |