WP Accurate Form Data <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
highThe accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=Accu_Data_WP.
- CVSS:
- 8.8
- Affected:
- up to 1.2
- Fix:
- No patched version reported
- Disclosed:
- Jun 21, 2015