Cross site scripting

The kentoemailsubscriberajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sanitise, validate and escape the submitted subscribeemail and subscribename POST parameters, inserting them in the DB and then outputting them back in the Subscriber list...

PT-2021-16076

Name of the Vulnerable Software and Affected Versions Email Subscriber WordPress plugin versions 1.1 and earlier Description The kento email subscriber ajax AJAX action does not properly sanitise, validate, and escape the submitted subscribe email and subscribe name POST parameters. These...