TI-2015-07801 CVE-2015-9424 · GHSA-859h-mw55-3q22The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the…Priority LOW 31The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php global_url or admin_url parameter.CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00881 · Published 2019-09-26 · No fix listed CWE-352