CVE-2019-20204

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/ at the beginning and a crafted SVG element...

CVE-2019-20204

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/ at the beginning and a crafted SVG element...

CVE-2019-20203

The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message...

CVE-2019-20203

The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message...

Design/Logic Flaw

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/ at the beginning and a crafted SVG element...

Code injection

The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message...

Postie <= 1.9.40 - Post Submission Spoofing & Stored XSS

"The Postie plugin for WordPress only allows posting of articles submitted by authorized users through a mailing list registered in the plugin settings. However through the email sender's spoofing technique, it was possible to bypass the plugin settings and publish a post as having been sent by a...

CVE-2019-20204

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/ at the beginning and a crafted SVG element...

CVE-2019-20203

The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message...

CVE-2019-20203

CVE-2019-20203 affects the WordPress Postie plugin up to version 1.9.40. The vulnerability stems from the Authorized Addresses feature allowing remote attackers to publish posts by spoofing the From header of emails, enabling post publication bypass. Some sources also describe associated cross-si...

PT-2020-10368 · WordPress · Postie

Name of the Vulnerable Software and Affected Versions: Postie plugin version 1.9.40 Description: The issue allows for XSS, as demonstrated by a certain payload starting with jaVasCript:/ and including a crafted SVG element. Recommendations: For Postie plugin version 1.9.40, update to a newer...

wordpress postie plugin 1.4.3 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Postie Version: 1.4.3 Software Download: http://wordpress.org/extend/plugins/postie/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with...

CVE-2012-2580

Cross-site scripting XSS vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email...

Cross site scripting

Cross-site scripting XSS vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email...

CVE-2012-2580

Postie WordPress plugin (v1.4.3, possibly prior to v1.5.15) is affected by a stored XSS vulnerability (CVE-2012-2580). An attacker can inject arbitrary JavaScript via the From field of an emailed message, leading to script execution in the victim’s browser on the affected site. The root cause is ...

WordPress Postie Plugin 1.4.3 - Stored XSS

WordPress Postie plugin is prone to a stored XSS vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credential...