2 matches found
CVE-2015-9441: Cross-Site Request Forgery (CSRF)
The bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify.php...
6.5CVSS6.6AI score0.00832EPSS
SaveExploits1References2
PT-2019-7400
Name of the Vulnerable Software and Affected Versions Bookmarkify plugin version 2.9.2 for WordPress Description The issue concerns a CSRF vulnerability that leads to XSS. It is exploited via the "wp-admin/options-general.php?page=bookmarkify.php" API endpoint. Recommendations For Bookmarkify...
6.5CVSS0.00832EPSS
SaveExploits1References4
20