exploitDog

GHSA-636m-qxqr-38vj

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.

Ссылки

EPSS

Процентиль: 38%

0.00167

Низкий

CVE ID

Связанные уязвимости

CVE-2015-9422

CVSS3: 6.5

nvd

больше 6 лет назад

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.

EPSS

Процентиль: 38%

0.00167

Низкий

CVE ID