PT-2017-14786

Name of the Vulnerable Software and Affected Versions WP Mailster plugin versions prior to 1.5.5 Description The issue concerns a cross-site scripting XSS problem in the unsubscribe handler. Specifically, the mes parameter in the /view/subscription/unsubscribe2.php endpoint is vulnerable. This...

WordPress WP Mailster 1.5.4.0 Cross Site Scripting Vulnerability

WordPress WP Mailster plugin version 1.5.4.0 suffers from a persistent cross site scripting vulnerability. Vulnerable WP Mailster 1.5.4.0 WP Mailster is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...

WordPress WP Mailster plugin <=1.5.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by Ricardo Sanchez in WordPress WP Mailster plugin versions =1.5.4. Solution Update the WordPress WP Mailster plugin to the latest available version at least 1.5.5...

WordPress WP Mailster 1.5.4.0 Cross Site Scripting

Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable WP Mailster 1.5.4.0 WP Mailster is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in t...

WP Mailster <= 1.5.4 - Unauthenticated Cross-Site Scripting (XSS)

The WP Mailster WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability...