Lucene search
Bob MatyasWPEX-ID:3C0B4714-CC45-4399-9D4A-4940D0517DD4HistoryApr 30, 2024 - 12:00 a.m.
Sailthru Triggermail <= 1.1 - Reflected XSS
2024-04-3000:00:00
Bob Matyas
25
sailthru
triggermail
xss
vulnerability
update
exploit
poc
may 14 2024
Description The plugin does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
The PoC will be displayed on May 14, 2024, to give users the time to update.Related
nvd
nvd
CVE-2024-4289
2024-05-21 06:15:09
cvelist
cvelist
CVE-2024-4289 Sailthru Triggermail <= 1.1 - Reflected XSS
2024-05-21 06:00:02
cve
cve
CVE-2024-4289
2024-05-21 06:15:09
vulnrichment
vulnrichment
CVE-2024-4289 Sailthru Triggermail <= 1.1 - Reflected XSS
2024-05-21 06:00:02
wpvulndb
wpvulndb
Sailthru Triggermail <= 1.1 - Reflected XSS
2024-04-30 00:00:00
wpexploit
wpexploit
Sailthru Triggermail <= 1.1 - Reflected XSS
2024-04-30 00:00:00
wordfence
wordfence
AI Score
8.5
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPEX-ID:3C0B4714-CC45-4399-9D4A-4940D0517DD4