cleantalk
Vulnerabilities and Security Researches

YITH Maintenance Mode, CVE-2015-9429

CVE, Research URL

CVE-2015-9429

Application

YITH Maintenance Mode

Published on
Sep 26, 2019
Research Description
The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter.
Affected versions
Min -, max 1.2.0.
Status
vulnerable