WP Mailster Cross-Site Scripting Vulnerability

Wp Mailster is Wp Mailster open source a mailing list plugin for WordPress. Used to provide automatic e-mail list . WP Mailster 1.6.18.0 suffers from a cross-site scripting vulnerability that stems from the lack of filtering and escaping of parameters in the server details page. When a victim ope...

CVE-2021-28975

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mstservers page, for a crafted serverhost, servername, or connectionparameter parameter...

CVE-2021-28975

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mstservers page, for a crafted serverhost, servername, or connectionparameter parameter...

Cross site scripting

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mstservers page, for a crafted serverhost, servername, or connectionparameter parameter...

CVE-2021-28975

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mstservers page, for a crafted serverhost, servername, or connectionparameter parameter...

CVE-2021-28975

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mstservers page, for a crafted serverhost, servername, or connectionparameter parameter...

CVE-2021-28975

Concretely, CVE-2021-28975 affects WP Mailster 1.6.18.0 and enables cross-site scripting via the mst_servers page when crafted values are supplied for server_host, server_name, or connection_parameter. The issue stems from insufficient input validation/escaping on the server details page. Exploit...

Wp Mailster 跨站脚本漏洞

Wp Mailster is Wp Mailster open source a mailing list plugin for WordPress. Used to provide automatic e-mail list . WP Mailster 1.6.18.0 suffers from a cross-site scripting vulnerability that stems from the lack of filtering and escaping of parameters in the server details page. When a victim ope...

WordPress Mailster plugin <= 2.4.8 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Thierry Viaccoz in WordPress Mailster plugin versions = 2.4.8. Solution Update the WordPress Mailster plugin to the latest available version at least 2.4.9...

Mailster Gravity Forms < 2.4.9 - Unauthenticated Stored Cross-Site Scripting (XSS)

Mailster 1 is a newsletter plugin for WordPress. It allows to create, send and track the newsletter campaigns. Compass Security identified a stored Cross-Site Scripting XSS vulnerability affecting the administration interface. Successful exploitation requires no authentication and can be performe...

Mailster Gravity Forms < 2.4.9 - Unauthenticated Stored Cross-Site Scripting (XSS)

Mailster 1 is a newsletter plugin for WordPress. It allows to create, send and track the newsletter campaigns. Compass Security identified a stored Cross-Site Scripting XSS vulnerability affecting the administration interface. Successful exploitation requires no authentication and can be performe...

CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

Code injection

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

WordPress WP Mailster Plugin Cross-Site Scripting Vulnerability

WP Mailster is a WordPress plugin that allows your users to be part of a group and communicate via email without having to log into your website. A cross-site scripting vulnerability exists in the unsubscription handler in the WordPress plugin WP Mailster before 1.5.5. An attacker can exploit thi...

CVE-2017-17451

CVE-2017-17451 affects WordPress WP Mailster plugin versions before 1.5.5. It is a cross-site scripting (XSS) vulnerability in the unsubscribe handler (view/subscription/unsubscribe2.php) exploitable via the mes parameter. Impact, as described: an attacker could inject malicious scripts into page...

WordPress WP Mailster 1.5.4.0 Cross Site Scripting Vulnerability

WordPress WP Mailster plugin version 1.5.4.0 suffers from a persistent cross site scripting vulnerability. Vulnerable WP Mailster 1.5.4.0 WP Mailster is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...

WordPress WP Mailster plugin <=1.5.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by Ricardo Sanchez in WordPress WP Mailster plugin versions =1.5.4. Solution Update the WordPress WP Mailster plugin to the latest available version at least 1.5.5...