CVE-2023-3158

CVE-2023-3158 concerns the Mail Control WordPress plugin (versions up to and including 0.2.8) with a stored XSS flaw in the email subject caused by insufficient input sanitization and output escaping. Unauthenticated attackers could inject scripts that run when users load injected pages. Multiple...