CVE-2019-20204

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/ at the beginning and a crafted SVG element...

PT-2020-10368 · WordPress · Postie

Name of the Vulnerable Software and Affected Versions: Postie plugin version 1.9.40 Description: The issue allows for XSS, as demonstrated by a certain payload starting with jaVasCript:/ and including a crafted SVG element. Recommendations: For Postie plugin version 1.9.40, update to a newer...