CVE-2015-2807: Documentcloud Navis Documentcloud

Medium severity, CVSS 4.3. EPSS: 7.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter.

Affected products

• Documentcloud Navis Documentcloud: up to and including 0.1

Published 2015-09-01. Last modified 2026-06-17.