CVE-2021-28975

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mstservers page, for a crafted serverhost, servername, or connectionparameter parameter...

CVE-2021-28975

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mstservers page, for a crafted serverhost, servername, or connectionparameter parameter...

CVE-2021-28975

Concretely, CVE-2021-28975 affects WP Mailster 1.6.18.0 and enables cross-site scripting via the mst_servers page when crafted values are supplied for server_host, server_name, or connection_parameter. The issue stems from insufficient input validation/escaping on the server details page. Exploit...