Lucene search
Bob MatyasWPVDB-ID:072785DE-0CE5-42A4-A3FD-4EB1D1A2F1BEHistoryApr 30, 2024 - 12:00 a.m.
Sailthru Triggermail <= 1.1 - Reflected XSS
2024-04-3000:00:00
Bob Matyas
wpscan.com
2
reflected xss
sanitization
cross-site scripting
admin privilege
Description The plugin does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PoC
Make a logged in admin open:
Related
cvelist
cvelist
CVE-2024-4289 Sailthru Triggermail <= 1.1 - Reflected XSS
2024-05-21 06:00:02
nvd
nvd
CVE-2024-4289
2024-05-21 06:15:09
cve
cve
CVE-2024-4289
2024-05-21 06:15:09
vulnrichment
vulnrichment
CVE-2024-4289 Sailthru Triggermail <= 1.1 - Reflected XSS
2024-05-21 06:00:02
wpexploit
wpexploit
Sailthru Triggermail <= 1.1 - Reflected XSS
2024-04-30 00:00:00
Sailthru Triggermail <= 1.1 - Reflected XSS
2024-04-30 00:00:00
wordfence
wordfence
AI Score
8.4
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:072785DE-0CE5-42A4-A3FD-4EB1D1A2F1BE