57 matches found
CVE-2019-20204
The CVE-2019-20204 entry concerns the WordPress Postie plugin, version 1.9.40. A cross-site scripting (XSS) vulnerability exists in this plugin that can be triggered by a crafted payload starting with jaVasCript:/* and an embedded SVG element, enabling execution of client‑side scripts in the cont...
CVE-2019-20203
The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message...
CVE-2019-20203
CVE-2019-20203 affects the WordPress Postie plugin up to version 1.9.40. The vulnerability stems from the Authorized Addresses feature allowing remote attackers to publish posts by spoofing the From header of emails, enabling post publication bypass. Some sources also describe associated cross-si...
CVE-2019-20204: Improper Neutralization of Input During Web Page Generation
The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/ at the beginning and a crafted SVG element...
PT-2020-10368 · WordPress · Postie
Name of the Vulnerable Software and Affected Versions: Postie plugin version 1.9.40 Description: The issue allows for XSS, as demonstrated by a certain payload starting with jaVasCript:/ and including a crafted SVG element. Recommendations: For Postie plugin version 1.9.40, update to a newer...
CVE-2019-20203: Authentication Bypass by Spoofing
The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message...
wordpress postie plugin 1.4.3 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Postie Version: 1.4.3 Software Download: http://wordpress.org/extend/plugins/postie/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with...
CVE-2012-2580
Cross-site scripting XSS vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email...
Cross site scripting
Cross-site scripting XSS vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email...
CVE-2012-2580
Cross-site scripting XSS vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email...
CVE-2012-2580
Postie WordPress plugin (v1.4.3, possibly prior to v1.5.15) is affected by a stored XSS vulnerability (CVE-2012-2580). An attacker can inject arbitrary JavaScript via the From field of an emailed message, leading to script execution in the victim’s browser on the affected site. The root cause is ...
CVE-2012-2580: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email...
Wordpress Postie Plugin 1.4.3 Stored XSS
Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Postie Version: 1.4.3 Software Download: http://wordpress.org/extend/plugins/postie/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received fr...
WordPress Postie Plugin 1.4.3 - Stored XSS
WordPress Postie plugin is prone to a stored XSS vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credential...
WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Postie Version: 1.4.3 Software Download: http://wordpress.org/extend/plugins/postie/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with disclosure date set to 20 Jul 2012 23 Jul...
WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting
WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Postie Version: 1.4.3 Software Download: http://wordpress.org/extend/plugins/postie/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...
