CVE-2015-9422

The CVE-2015-9422 entry concerns the PlugNedit Adaptive Editor WordPress plugin prior to 6.2.0. The vulnerability is a CSRF that can yield XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load and the parameters plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditE...

CVE-2015-9423

The CVE-2015-9423 entry concerns the PlugNedit Adaptive Editor WordPress plugin (pre-6.2.0) and a reflected/Stored XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load with parameters such as PlugneditBGColor, PlugneditEditorMargin, plugnedit_width, pnemedcount, or plu...