CVE-2019-14787: Improper Neutralization of Input During Web Page Generation

The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newslettersloadneweditor contentarea parameter...

PT-2019-13832 · Tribulant · Tribulant Newsletters

Name of the Vulnerable Software and Affected Versions: Tribulant Newsletters plugin versions prior to 4.6.19 Description: The issue allows for XSS attacks via the "wp-admin/admin-ajax.php?action=newsletters load new editor" API endpoint, specifically through the contentarea parameter...