TI-2015-02478 CVE-2015-2807 · GHSA-4cg7-vxw6-h39qCross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud…Priority LOW 30Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07328 · Published 2015-09-01 · No fix listed CWE-79