CVE-2023-3082

creationtimestamp| type| source ---|---|--- 2023-07-12 12:48:25+00:00| seen| https://t.me/cibsecurity/66503...

CVE-2023-3082

The CVE-2023-3082 entry relates to the WordPress Post SMTP plugin (versions up to and including 2.5.7). The root cause is insufficient input sanitization and output escaping in email contents, enabling Stored Cross-Site Scripting (XSS). The impact is unauthenticated attackers can inject arbitrary...

CVE-2023-3082 Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email

The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.5.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

WordPress Post SMTP Plugin <= 2.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Post SMTP Type Plugin Vulnerable versions = 2.5.7 Fixed in 2.5.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3082 Patch priority Low CVSS severity Low 7.1 Developer WPExperts PSID c8d98d03e5dd Credits Alex Thomas Required privilege...