What’s Vulnerable › Vulnerabilities

CVE-2015-2796

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-02-02 · updated 2026-06-17
• Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the search_for parameter to (1) search_by_tag.php, (2) search_contacts.php, or (3) search.php.

Affected products

• ProjectPier: 0.8.8

References

• https://github.com/Project-Pier/ProjectPier-Core/commit/74ecbd4e939a65ba643a4af05fbdb1bb66992435
• https://github.com/Project-Pier/ProjectPier-Core/issues/37
• https://github.com/Project-Pier/ProjectPier-Core/commit/74ecbd4e939a65ba643a4af05fbdb1bb66992435
• https://github.com/Project-Pier/ProjectPier-Core/issues/37

Get alerted when CVE-2015-2796 or the next vulnerability affects your stack