CVE-2017-18522

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...

CVE-2017-18522

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...

CVE-2017-18522

The CVE-2017-18522 entry concerns the eelv-newsletter WordPress plugin, prior to version 4.6.1. The vulnerability is an XSS flaw in the plugin’s address book, as described by multiple sources (including NVD and CNVD). Impact details in the documents indicate client-side code execution could be po...