PT-2019-7367

Name of the Vulnerable Software and Affected Versions xpinner-lite plugin versions through 2.2 for WordPress Description The issue concerns a CSRF vulnerability with resultant XSS in the wp-admin/options-general.php endpoint. This allows for cross-site request forgery attacks that can lead to...

CVE-2015-9407: Improper Neutralization of Input During Web Page Generation

The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS...

CVE-2015-9408: Cross-Site Request Forgery (CSRF)

The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS...