Lucene search
WPScanCVELIST:CVE-2023-5958HistoryNov 27, 2023 - 4:22 p.m.
CVE-2023-5958 POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting
2023-11-2716:22:03
WPScan
www.cve.org
3
cve-2023-5958
post smtp mailer
unauthenticated cross-site scripting
EPSS
0.001
Percentile
30.1%
The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users.
CNA Affected
[
{
"vendor": "Unknown",
"product": "POST SMTP Mailer",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "2.7.1"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2023-5958
2023-11-27 17:15:09
wpvulndb
wpvulndb
POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting
2023-11-06 00:00:00
openvas
openvas
WordPress Post SMTP Mailer/Email Log Plugin < 2.7.1 XSS Vulnerability
2023-11-28 00:00:00
prion
prion
Design/Logic Flaw
2023-11-27 17:15:00
nvd
nvd
CVE-2023-5958
2023-11-27 17:15:09
wpexploit
wpexploit
POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting
2023-11-06 00:00:00