Files
CVEs-PoC/2015/CVE-2015-9421.md
T
2025-09-29 21:09:30 +02:00

635 B

CVE-2015-9421

Description

The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.

POC

Reference

Github