CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

CVE-2017-17451

CVE-2017-17451 affects WordPress WP Mailster plugin versions before 1.5.5. It is a cross-site scripting (XSS) vulnerability in the unsubscribe handler (view/subscription/unsubscribe2.php) exploitable via the mes parameter. Impact, as described: an attacker could inject malicious scripts into page...