Files
CVEs-PoC/2015/CVE-2015-9424.md
T
2025-09-29 21:09:30 +02:00

661 B

CVE-2015-9424

Description

The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php global_url or admin_url parameter.

POC

Reference

Github