Bookmarkify <= 1.1.3 - Cross-Site Request Forgery to Cross-Site Scripting
mediumThe bookmarkify plugin 1.1.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify.php.
- CVSS:
- 5.4
- Affected:
- up to 1.1.3
- Fix:
- No patched version reported
- Disclosed:
- Aug 9, 2015