CVE-2024-32523 WordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

CVE-2024-32523

CVE-2024-32523 is an unauthenticated Path Traversal leading to PHP Local File Inclusion in Mailster WordPress plugin

PT-2024-24642 · Everpress · Everpress Mailster

Name of the Vulnerable Software and Affected Versions: EverPress Mailster versions n/a through 4.0.6 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion in EverPress Mailster...

WordPress Mailster Plugin <= 4.0.6 is vulnerable to Local File Inclusion

Software Mailster Type Plugin Vulnerable versions = 4.0.6 Fixed in 4.0.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-32523 Patch priority Low CVSS severity Low 8.1 Developer EverPress PSID 620c4e294bfd Credits Rafie Muhammad Patchstack Required privilege...

CVE-2024-30503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

CVE-2024-30503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster allows Reflected XSS.This issue affects Mailster: from n/a through 4.0.6...

CVE-2024-30503

CVE-2024-30503 is a reflected Cross‑Site Scripting vulnerability in the Mailster WordPress plugin (Mailster: from n/a through 4.0.6). According to NVD, impact is limited to confidentiality and integrity (C/L, I/L) with a network attack vector, requiring user interaction, and a scope change. CVSS ...

VulnCheck KEV: CVE-2024-30503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

WordPress Mailster Plugin <= 4.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Mailster Type Plugin Vulnerable versions = 4.0.6 Fixed in 4.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30503 Patch priority Medium CVSS severity Medium 7.1 Developer EverPress PSID 3aa28982f4b8 Credits Rafie Muhammad Patchstack Required privilege...