Lucene search
WpvulndbWPVDB-ID:AA0C5261-6034-41A8-AEEE-C7951920861AHistorySep 26, 2023 - 12:00 a.m.
AcyMailing SMTP Newsletter < 8.6.3 - Reflected XSS
2023-09-2600:00:00
wpscan.com
5
acymailing smtp newsletter
reflected cross-site scripting
unsanitised parameters
high privilege users
admin
Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 8.6.3 |
Related
nvd
nvd
CVE-2023-41867
2023-09-25 19:15:10
cve
cve
CVE-2023-41867
2023-09-25 19:15:10
osv
osv
CVE-2023-41867
2023-09-25 19:15:10
prion
prion
Cross site scripting
2023-09-25 19:15:00
cvelist
cvelist
wordfence
wordfence
5.7 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Related for WPVDB-ID:AA0C5261-6034-41A8-AEEE-C7951920861A