CVE-2015-9397

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS...

CVE-2015-9397

CVE-2015-9397 affects the GoCodes WordPress plugin (up to version 1.3.5). The vulnerability is an XSS via wp-admin/tools.php?deletegc in the GoCodes plugin, with authenticated-execution implications (Authenticated XSS per cited WPVulndb entry). Impact described as cross-site scripting; CVSS data ...