WordPress Newsletter Manager Plugin <= 1.0.2 - XSS

2014-01-1600:00:00

N/A

patchstack.com

0.001 Low

EPSS

Percentile

49.0%

Because of this vulnerability in admin/test_mail.php, the attackers can inject arbitrary web script or HTML via the “id” parameter.

Solution

           Update the plugin.

CPENameOperatorVersion
newsletter managerle1.0.2

CPE	Name	Operator	Version
	newsletter manager	le	1.0.2

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6627

0.001 Low

EPSS

Percentile

49.0%

Related for PATCHSTACK:B78A92F94BBA6085BC4A83FD994DE82E