CVE-2015-9409

The alo-easymail plugin before 2.6.01 for WordPress has CSRF with resultant XSS in pages/alo-easymail-admin-options.php...

CVE-2015-9409

creationtimestamp| type| source ---|---|--- 2019-09-25 20:31:23+00:00| seen| https://t.me/cibsecurity/7006...

CVE-2015-9409

The CVE covers the WordPress alo-easymail plugin prior to 2.6.01, where CSRF leads to a resultant XSS in pages/alo-easymail-admin-options.php. Affected software: alo-easymail plugin (WordPress). Underlying issue: CSRF allowing XSS on the admin options page. Impact as stated: cross-site scripting ...