Vulnerabilities (CVE)

Filtered by vendor Olevmedia Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-9421 1 Olevmedia 1 Olevmedia Shortcodes 2019-09-26 4.3 MEDIUM 6.5 MEDIUM
The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.