CVE-2023-3158

creationtimestamp| type| source ---|---|--- 2023-07-12 12:48:35+00:00| seen| https://t.me/cibsecurity/66510...

CVE-2023-3158

CVE-2023-3158 concerns the Mail Control WordPress plugin (versions up to and including 0.2.8) with a stored XSS flaw in the email subject caused by insufficient input sanitization and output escaping. Unauthenticated attackers could inject scripts that run when users load injected pages. Multiple...

CVE-2023-3158 Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject

The Mail Control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 0.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

WordPress Mail Control Plugin <= 0.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Mail Control Type Plugin Vulnerable versions = 0.3.1 Fixed in 0.3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3158 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 0eca928a8cff Credits Alex Thomas Required...