Sailthru Triggermail@* Security Vulnerabilities and Issues — Sailthru Triggermail@* CVE List

Lucene search

JontascSailthru Triggermail*

3 matches found

CVE•added 2024/05/21 6:15 a.m.•65 views

CVE-2024-4289

The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

6.1CVSS5.9AI score0.00153EPSS

CVE•added 2024/05/21 6:15 a.m.•47 views

CVE-2024-4290

The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

7.1CVSS7.6AI score0.00062EPSS

CVE•added 2025/05/15 8:15 p.m.•19 views

CVE-2024-11141

The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing CSRF protection which could allow subscribers to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)...

6.1CVSS5.8AI score0.00051EPSS