CVE-2024-11582

creationtimestamp| type| source ---|---|--- 2025-02-19 04:19:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liiwbtstfq2t 2025-02-19 07:52:23+00:00| seen| https://t.me/cvedetector/18404 2025-02-19 08:07:07+00:00| seen|...

CVE-2024-11582

CVE-2024-11582 affects Subscribe2 – Form, Email Subscribers & Newsletters for WordPress. Root cause: insufficient input sanitization and output escaping in the ip parameter across all versions up to 10.43, enabling stored XSS via unauthenticated exploitation. Impact: arbitrary scripts executed on...

CVE-2024-11582 Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter

The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ip parameter in all versions up to, and including, 10.43 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...