The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, lp-email, lp-address, or lp-niche parameters.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-09-26T00:50:11

Updated: 2024-08-06T08:51:05.244Z

Reserved: 2019-09-25T00:00:00

Link: CVE-2015-9428

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-09-26T01:15:10.917

Modified: 2024-11-21T02:40:36.810

Link: CVE-2015-9428

cve-icon Redhat

No data.