2 matches found
CVE-2015-9424
The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php globalurl or adminurl parameter...
6.5CVSS6.3AI score0.00881EPSS
SaveExploits1References3
CVE-2015-9424: Cross-Site Request Forgery (CSRF)
The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php globalurl or adminurl parameter...
6.5CVSS6.6AI score0.00881EPSS
SaveExploits1References2
20