WordPress Postie cross-site scripting vulnerability

WordPress Postie versions 1.9.87 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping; it results in stored cross-site scripting via Email Body URL Autolinking. Unauthenticated attackers can exploit the unauthenticated...