CVE-2015-9413

The CVE-2015-9413 issue affects the WordPress eShop plugin (versions up to 6.3.13). The vulnerability is a CSRF that can cause a reflected XSS via the parameter title in wp-admin/admin.php?page=eshop-downloads.php. The root cause is CSRF enabling an attacker to induce unintended requests that, un...