CVE-2024-1328

The Newsletter2Go WordPress plugin is affected by CVE-2024-1328: stored XSS via the style parameter in all versions up to 4.0.13. Exploitation requires authentication (subscriber access or higher) and can inject scripts that execute when a user visits an injected page. Technical details about a p...

WordPress Newsletter2Go Plugin <= 4.0.13 is vulnerable to Cross Site Scripting (XSS)

Software Newsletter2Go Type Plugin Vulnerable versions = 4.0.13 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1328 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 1277fbb17528 Credits Francesco Carlucci...