← Back

Manual Image Crop Project

manual_image_crop_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Manual Image Crop
manual_image_crop
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-9426
1Manual Image Crop Project
1Manual Image Crop
Nov 21, 2024
Sep 26, 2019
N/A· v4
4.6 MEDIUM· v3
3.5 LOW· v2
The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window postId parameter.