CVE-2016-15037

A vulnerability, which was classified as problematic, has been found in go4rayyan Scumblr up to 2.0.1a. Affected by this issue is some unknown functionality of the component Task Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.2 is able to address this issue. The patch is identified as 5c9120f2362ddb7cbe48f2c4620715adddc4ee35. It is recommended to upgrade the affected component. VDB-251570 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/go4rayyan/CG1/commit/5c9120f2362ddb7cbe48f2c4620715adddc4ee35Patch
• https://github.com/go4rayyan/CG1/releases/tag/v2.0.2Release Notes
• https://vuldb.com/?ctiid.251570Permissions Required, Third Party Advisory
• https://vuldb.com/?id.251570Third Party Advisory
• https://github.com/go4rayyan/CG1/commit/5c9120f2362ddb7cbe48f2c4620715adddc4ee35Patch
• https://github.com/go4rayyan/CG1/releases/tag/v2.0.2Release Notes
• https://vuldb.com/?ctiid.251570Permissions Required, Third Party Advisory
• https://vuldb.com/?id.251570Third Party Advisory

Published

Jan 21, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-15031A vulnerability was found in PHP-Login 1.0. It has been decl…9.8
• CVE-2016-15032** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…6.1
• CVE-2016-15033The Delete All Comments plugin for WordPress is vulnerable t…9.8
• CVE-2016-15034A vulnerability was found in Dynacase Webdesk and classified…9.8
• CVE-2016-15035A vulnerability was found in Doc2k RE-Chat 1.0. It has been …6.1
• CVE-2016-15036** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…7.5
• CVE-2016-15038A vulnerability, which was classified as critical, was found…6.5
• CVE-2016-15039A vulnerability classified as critical was found in mhuertos…6.3
• CVE-2016-1504dhcpcd before 6.10.0 allows remote attackers to cause a deni…
• CVE-2016-15040The Kento Post View Counter plugin for WordPress is vulnerab…9.8
• CVE-2016-15041The MainWP Dashboard – The Private WordPress Manager for Mul…6.1
• CVE-2016-15042The Frontend File Manager (versions < 4.0), N-Media Post Fro…9.8