CVE-2024-13098

The WordPress Email Newsletter plugin (versions 1.1 and earlier ) is vulnerable to Reflected Cross-Site Scripting (XSS) due to a lack of proper sanitization and escaping of a parameter before it is outputted back in the page. An attacker can exploit this by crafting a malicious link to execute sc...