CVE-2024-43238

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs weMail wemail allows DOM-Based XSS.This issue affects weMail: from n/a through = 1.14.5...

CVE-2024-43238

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs weMail wemail allows DOM-Based XSS.This issue affects weMail: from n/a through = 1.14.5...

CVE-2024-43238

CVE-2024-43238: WeMail for WordPress has a Reflected XSS in web page generation. Affected: the weMail plugin up to version 1.14.5 (from n/a through 1.14.5). According to the connected docs, the issue is publicly associated with this CVE and has a patch status indicating it was addressed (patched)...

WordPress weMail Plugin <= 1.14.5 is vulnerable to Cross Site Scripting (XSS)

Software weMail Type Plugin Vulnerable versions = 1.14.5 Fixed in 1.14.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43238 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6ade5dffb53e Credits LVT-tholv2k Required privilege...