The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name lp-business-name lp-phone lp-street lp-city-state lp-country lp-email lp-address or lp-niche parameters.