Files
CVEs-PoC/2015/CVE-2015-9422.md
T
2024-06-09 00:33:16 +00:00

778 B

CVE-2015-9422

Description

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.

POC

Reference

Github

No PoCs found on GitHub currently.