WordPress SmartEmailing.cz plugin <= 2.2.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin SmartEmailing.cz versions = 2.2.0...

CVE-2024-12261

CVE-2024-12261 : SmartEmailing plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in the se-lists-updated parameter on all versions up to 2.2.0 due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject scripts into pages that run...

WordPress plugin SmartEmailing.cz 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

smartemailing.cz Cross Site Scripting vulnerability

Security Researcher raviakp1004 Helped patch 511 vulnerabilities Received 4 Coordinated Disclosure badges Received 4 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting smartemailing.cz website and its users. Following...

smartemailing.cz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1052679 Security Researcher geeknik Helped patch 8958 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting smartemailing.cz website a...

smartemailing.cz XSS vulnerability

Open Bug Bounty ID: OBB-707775 Description| Value ---|--- Affected Website:| smartemailing.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

smartemailing.cz XSS vulnerability

Open Bug Bounty ID: OBB-458296 Description| Value ---|--- Affected Website:| smartemailing.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...