CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

PT-2017-14786

Name of the Vulnerable Software and Affected Versions WP Mailster plugin versions prior to 1.5.5 Description The issue concerns a cross-site scripting XSS problem in the unsubscribe handler. Specifically, the mes parameter in the /view/subscription/unsubscribe2.php endpoint is vulnerable. This...