cve/2015/CVE-2015-7806.md

CVE-2015-7806

Description

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.

POC

Reference

• https://wpvulndb.com/vulnerabilities/8220

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon