CVE-2015-9391: Ostenta Yawpp

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter.

Affected products

• Ostenta Yawpp: up to and including 1.2.2

Published 2019-09-20. Last modified 2026-06-17.