CVE-2015-9427

CVE-2015-9427 tracks a CSRF-induced XSS vulnerability in the WordPress plugin Googmonify, affecting versions up to 0.5.1. The issue is triggered via CSRF that can lead to XSS through the admin page wp-admin/options-general.php?page=googmonify.php with PID or AID parameters. Documents confirm the ...