Lucene search
+L

2 matches found

Mend
Mend
•added 2019/09/26 1:12 a.m.•8 views

CVE-2015-9434

The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=kwlogos&page=kwlogossettings tab or tabflagsorder parameter...

7.1CVSS0.00867EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/26 12:00 a.m.•11 views

CVE-2015-9434: Cross-Site Request Forgery (CSRF)

The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=kwlogos&page=kwlogossettings tab or tabflagsorder parameter...

6.5CVSS6.6AI score0.00867EPSS
SaveExploits1References2
Rows per page
Query Builder