PT-2017-14786

Name of the Vulnerable Software and Affected Versions WP Mailster plugin versions prior to 1.5.5 Description The issue concerns a cross-site scripting XSS problem in the unsubscribe handler. Specifically, the mes parameter in the /view/subscription/unsubscribe2.php endpoint is vulnerable. This...