CVE-2024-12261

CVE-2024-12261 : SmartEmailing plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in the se-lists-updated parameter on all versions up to 2.2.0 due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject scripts into pages that run...