PT-2019-7387

Name of the Vulnerable Software and Affected Versions wplegalpages plugin versions prior to 1.1 Description The issue concerns a CSRF with resultant XSS. It is exploitable via the wp-admin/admin.php?page=legal-pages endpoint with parameters such as lp-domain-name, lp-business-name, lp-phone,...