CVE-2018-0602

The CVE-2018-0602 entry concerns WordPress plugin Email Subscribers & Newsletters (Icegram) with a cross-site scripting (XSS) vulnerability in versions prior to 3.5.0. The root cause described across connected documents is an unsafe handling in the plugin, notably a missing sanitization step in t...