PT-2025-11223

Name of the Vulnerable Software and Affected Versions Post SMTP versions prior to 3.3.0 Description A flaw exists in the Post SMTP WordPress plugin due to a broken access control mechanism within its REST API. This allows users with low privileges, such as Subscribers, to access sensitive email...

CVE-2024-55064: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EasyVirt DC NetScope = 8.6.4 allow remote attackers to inject arbitrary JavaScript or HTML code via the 1 smtpserver, 2 smtpaccount, 3 smtppassword, or 4 emailrecipients parameter to /smtp/update; the 5 ntp or 6 dns parameter to...

PT-2025-9568

Name of the Vulnerable Software and Affected Versions EasyVirt DC NetScope versions 8.6.4 and earlier Description Multiple cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary JavaScript or HTML code via vulnerable parameters. The affected parameters include smtp...