Files
CVEs-PoC/2015/CVE-2015-9422.md
T
2025-09-29 21:09:30 +02:00

756 B

CVE-2015-9422

Description

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.

POC

Reference

Github