4 matches found
CVE-2017-17451
The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...
CVE-2017-17451
The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...
PT-2017-14786
Name of the Vulnerable Software and Affected Versions WP Mailster plugin versions prior to 1.5.5 Description The issue concerns a cross-site scripting XSS problem in the unsubscribe handler. Specifically, the mes parameter in the /view/subscription/unsubscribe2.php endpoint is vulnerable. This...
kabalarians.com XSS vulnerability
Vulnerable URL: http://www.kabalarians.com/cfm/unsubscribe2.cfm?Email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 67177 Google...