CVE-2015-9233

HIGH · CVSS 8.8 EPSS 1.01%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-09-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2015-9233

Severity

HIGH

CVSS

8.8

EPSS

1.01%

WordPress

Original NVD Description

The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.php and cp_contactformpp_admin_int_list.inc.php.