CVE-2015-9423: Improper Neutralization of Input During Web Page Generation

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simplefieldsfieldtypepostdialogload PlugneditBGColor, PlugneditEditorMargin, plugneditwidth, pnemedcount, or plugneditcontent parameters...

PT-2019-7382

Name of the Vulnerable Software and Affected Versions PlugNedit Adaptive Editor plugin versions prior to 6.2.0 Description The issue concerns a cross-site scripting XSS problem. It affects the wp-admin/admin-ajax.php endpoint, specifically when the action parameter is set to "simple fields field...