VulnCheck KEV: CVE-2024-37433

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.9...

CVE-2024-32523

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

CVE-2024-32523 WordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

CVE-2024-32523 WordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

CVE-2024-32523

CVE-2024-32523 is an unauthenticated Path Traversal leading to PHP Local File Inclusion in Mailster WordPress plugin

PT-2024-24642 · Everpress · Everpress Mailster

Name of the Vulnerable Software and Affected Versions: EverPress Mailster versions n/a through 4.0.6 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion in EverPress Mailster...

WordPress plugin Mailster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Exploit for CVE-2024-32523

CVE-2024-32523-Poc CVE-2024-32523: Mailster /wp-content/plugin...

Mailster < 4.0.7 - Unauthenticated Local File Inclusion

Description The Mailster - Email Newsletter Plugin for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.6. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

WordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Mailster versions = 4.0.6...

WordPress Mailster Plugin <= 4.0.6 is vulnerable to Local File Inclusion

Software Mailster Type Plugin Vulnerable versions = 4.0.6 Fixed in 4.0.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-32523 Patch priority Low CVSS severity Low 8.1 Developer EverPress PSID 620c4e294bfd Credits Rafie Muhammad Patchstack Required privilege...

Mailster < 2.0.0 - Reflected Cross-Site Scripting

Description The Mailster plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-30503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster allows Reflected XSS.This issue affects Mailster: from n/a through 4.0.6...

CVE-2024-30503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

CVE-2024-30503

CVE-2024-30503 is a reflected Cross‑Site Scripting vulnerability in the Mailster WordPress plugin (Mailster: from n/a through 4.0.6). According to NVD, impact is limited to confidentiality and integrity (C/L, I/L) with a network attack vector, requiring user interaction, and a scope change. CVSS ...

CVE-2024-30503 WordPress Mailster plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

CVE-2024-30503 WordPress Mailster plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

WordPress Plugin Mailster 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

VulnCheck KEV: CVE-2024-30503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

WordPress Mailster Plugin <= 4.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Mailster Type Plugin Vulnerable versions = 4.0.6 Fixed in 4.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30503 Patch priority Medium CVSS severity Medium 7.1 Developer EverPress PSID 3aa28982f4b8 Credits Rafie Muhammad Patchstack Required privilege...