Lucene search

CVE-2023-3135

🗓️ 12 Jul 2023 05:10:15Reported by [email protected]Type

WordPress Mailtree Log Mail plugin CVE-2023-3135 allows unauthenticated stored XSS

Reporter	Title	Published	Views	Family All 7
Prion	Cross site scripting	12 Jul 202305:15	–	prion
WPVulnDB	Mailtree Log Mail < 1.0.1 - Unauthenticated Stored Cross-Site Scripting	20 Jun 202300:00	–	wpvulndb
CVE	CVE-2023-3135	12 Jul 202305:15	–	cve
Patchstack	WordPress Mailtree Log Mail Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	21 Jun 202300:00	–	patchstack
Cvelist	CVE-2023-3135	12 Jul 202304:38	–	cvelist
Wordfence Blog	“Never Assume Anything” – Unauthenticated Stored Cross-Site Scripting Vulnerability Exposed in 14 Email Logging Plugins	18 Jul 202316:40	–	wordfence
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 19, 2023 to June 25, 2023)	29 Jun 202313:24	–	wordfence

Nvd

Node

oacstudio mailtree_log_mailRange≤1.0.0wordpress

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/24d0229c-0f1b-42df-b89a-ce0b8a3fda7e
plugins	www.plugins.trac.wordpress.org/changeset/2928716/mailtree-log-mail

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Jul 2023 05:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS36.1

EPSS0.001