system
Describe <CVE-2015-9233>.
user
What is <CVE-2015-9233>?
assistant
The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.php and cp_contactformpp_admin_int_list.inc.php..