CVE-2012-2572

Cross-site scripting XSS vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email...

CVE-2012-2572

The CVE-2012-2572 entry affects the ThreeWP Email Reflector plugin for WordPress (versions before 1.16). The vulnerability is a Cross-Site Scripting (XSS) flaw in the Subject field of emails, due to insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML....