← Back

Manual Image Crop

manual_image_crop

Vendor: Manual Image Crop Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-9426
1Manual Image Crop Project
1Manual Image Crop
Nov 21, 2024
Sep 26, 2019
N/A· v4
4.6 MEDIUM· v3
3.5 LOW· v2
The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window postId parameter.