CVE-2015-9440

The monetize plugin through 1.03 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=monetize-zones-new...

CVE-2015-9440

The CVE-2015-9440 entry concerns the WordPress monetize plugin up to version 1.03, which is vulnerable to a CSRF that results in XSS when accessing wp-admin/admin.php?page=monetize-zones-new. Public sources in the connected data identify this as a CSRF/XSS issue affecting the monetize plugin, wit...