Simplysymphony Plugnedit
2 CVEs affecting Simplysymphony Plugnedit. Latest disclosed: 2019-09-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9422 | Medium | 6.5 | 2019-09-26 | The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_di… |
CVE-2015-9423 | Medium | 5.4 | 2019-09-26 | The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load PlugneditB… |