CVE-2015-9422

2019-09-2600:19:06

mitre

www.cve.org

0.002 Low

EPSS

Percentile

56.4%

JSON

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.