Lucene search

WordPress Mailtree Log Mail Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

🗓️ 21 Jun 2023 00:00:00Reported by Alex ThomasType

WordPress Mailtree Log Mail Plugin <= 1.0.0 Cross Site Scripting (XSS

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2023-3135	12 Jul 202305:15	–	cve
NVD	CVE-2023-3135	12 Jul 202305:15	–	nvd
Prion	Cross site scripting	12 Jul 202305:15	–	prion
WPVulnDB	Mailtree Log Mail < 1.0.1 - Unauthenticated Stored Cross-Site Scripting	20 Jun 202300:00	–	wpvulndb
Cvelist	CVE-2023-3135	12 Jul 202304:38	–	cvelist
Wordfence Blog	“Never Assume Anything” – Unauthenticated Stored Cross-Site Scripting Vulnerability Exposed in 14 Email Logging Plugins	18 Jul 202316:40	–	wordfence
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 19, 2023 to June 25, 2023)	29 Jun 202313:24	–	wordfence

Vulners

Node

oacstudio mailtree_log_mailRange≤1.0.0wordpress

Source	Link
wordpress	www.wordpress.org/plugins/mailtree-log-mail/
cve	www.cve.org/CVERecord
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/mailtree-log-mail/mailtree-log-mail-100-unauthenticated-stored-cross-site-scripting-via-email-subject

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Jun 2023 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS37.2