CVE-2012-2580

Postie WordPress plugin (v1.4.3, possibly prior to v1.5.15) is affected by a stored XSS vulnerability (CVE-2012-2580). An attacker can inject arbitrary JavaScript via the From field of an emailed message, leading to script execution in the victim’s browser on the affected site. The root cause is ...