Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages, CVE-2015-9428
- CVE, Research URL
- Home page URL
- Application
-
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages
- Published on
- Sep 26, 2019
- Research Description
- The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, lp-email, lp-address, or lp-niche parameters.
- Affected versions
-
max 1.1.
- Status
-
vulnerable