CVE-2015-9408
The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS.
CVSS 3.1 · 6.5 Medium
EPSS 1.1%
KEV · Not listed
Vendors
Products