CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

CVE-2017-17451: Improper Neutralization of Input During Web Page Generation

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

PT-2017-14786

Name of the Vulnerable Software and Affected Versions WP Mailster plugin versions prior to 1.5.5 Description The issue concerns a cross-site scripting XSS problem in the unsubscribe handler. Specifically, the mes parameter in the /view/subscription/unsubscribe2.php endpoint is vulnerable. This...

CVE-2017-17451

CVE-2017-17451 affects WordPress WP Mailster plugin versions before 1.5.5. It is a cross-site scripting (XSS) vulnerability in the unsubscribe handler (view/subscription/unsubscribe2.php) exploitable via the mes parameter. Impact, as described: an attacker could inject malicious scripts into page...