CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

Code injection

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

WordPress WP Mailster Plugin Cross-Site Scripting Vulnerability

WP Mailster is a WordPress plugin that allows your users to be part of a group and communicate via email without having to log into your website. A cross-site scripting vulnerability exists in the unsubscription handler in the WordPress plugin WP Mailster before 1.5.5. An attacker can exploit thi...

CVE-2017-17451

CVE-2017-17451 affects WordPress WP Mailster plugin versions before 1.5.5. It is a cross-site scripting (XSS) vulnerability in the unsubscribe handler (view/subscription/unsubscribe2.php) exploitable via the mes parameter. Impact, as described: an attacker could inject malicious scripts into page...

CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

CVE-2014-2023

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to 1 unsubscribeforum.php or 2 unsubscribetopic.php in mobiquo/functions/...

Inflection: Unsubscribe Any User

Researcher reported that HubSpot's "unsubscribe" feature allows any user to unsubscribe from marketing emails without having to confirm their email address. Inflection does not consider this a vulnerability, as we want to make it as easy as possible for users to stop receiving marketing emails th...

mesalva.com XSS vulnerability

Vulnerable URL: https://mesalva.com/forum/email/[email protected]%27%22%3E%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 81639 VIP website status:| No...

indiaproperty.com XSS vulnerability

Vulnerable URL: https://www.indiaproperty.com/unsubscribe/mailerunsubscribe.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Boozt Fashion AB: [www.boozt.com] - Authentication bypass

Description I have found a flaw in the authentication process when accessing the website by visiting an unsubscribe link. PoC 1. Visit http://click.email.boozt.com/?qs=723df61c937e4dbf9e378d2157f7907baa95fa00699f2b4d13e192b1d14ed67323d5c7a75c6f801baf1e68c2beabbc43d574caeb9b6f8c085971631d636b3cda ...

Mail.ru: XSS в письме, в поле отправителя.

User-assisted XSS in message reading Unsubscribe feature via crafted List-Unsubscribe header in e.mail.ru Web mail interface...

enews.washington.org XSS vulnerability

Vulnerable URL: http://enews.washington.org/leisure/unsubscribe.php?segmentid=1"...

newsletter.visitgrandjunction.com XSS vulnerability

Vulnerable URL: http://newsletter.visitgrandjunction.com/unsubscribe.php?segmentid=1"...

Nextcloud: IDOR unsubscribe Anyone from NextClouds Newsletters by knowing their Email

Hi Team, I Was Looking around your website and then I found a subdomain newsletter.nextcloud.com on the main page it shows us 3 Options i choose 1st that was Subscribe to our newsletter , Then I click on this Option and I was Taken to https://newsletter.nextcloud.com/?p=subscribe&id=1 The page...

graduate-jobs.com XSS vulnerability

Vulnerable URL: http://www.graduate-jobs.com/unsubscribe.jsp?email="--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 119944 VIP website status:| No Check graduate-jobs.com SSL...

fairwaystyles.com XSS vulnerability

Vulnerable URL: https://www.fairwaystyles.com/unsubscribe?eid=%22/%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1337131 VIP website status:| No Check fairwaystyles.com...

news.citigroup.com XSS vulnerability

Vulnerable URL: https://news.citigroup.com/unsubscribe.asp Details: Description| Value ---|--- Patched:| Yes, at 16.02.2017 Latest check for patch:| 16.02.2017 10:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

LocalTapiola: Enumeration in unsubscribe -function of /omatalousuk (viestinta.lahitapiola.fi)

Hi, I would like to report an issue where malicious user can unsubscribe any customer email subscription from viestinta.lahitapiola.fi. I am not sure if this in scope, but i took the liberty to bring forward to you, so that you can fix the bug. Impact Subscribe or unsubscribe is always a...

HackerOne in the third quarter TOP 5 vulnerability report-vulnerability warning-the black bar safety net

Foreword HackerOne in the third quarter TOP 5 vulnerability reports are coming announced. In this season, we participated in the Vegas hacker conference, hosted Hacked the World, and in the Reddit discussion above, some of the HackerOne problem. HackerOne vulnerability report from platform to...

login.moneyrush.com XSS vulnerability

Vulnerable URL: http://login.moneyrush.com/email-unsubscribe.php?u=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check login.moneyrush.com SSL connection:|...