Lucene search

K
wpvulndbWpvulndbWPVDB-ID:F276FC61-19B2-48DC-928F-75287B3A62B8
HistoryJul 05, 2023 - 12:00 a.m.

WP Mail Log < 1.1.2 - Unauthenticated Stored Cross-Site Scripting

2023-07-0500:00:00
wpscan.com
4
wp mail log
cross-site scripting
vulnerability
injection
web scripts
unauthenticated

0.001 Low

EPSS

Percentile

32.2%

The plugin does not properly sanitize and escape email contents, leading to a potential Stored Cross-Site Scripting vulnerability. This issue allows for arbitrary web scripts to be injected into pages, which will execute when a user accesses an affected page.

CPENameOperatorVersion
wp-mail-logeq*

0.001 Low

EPSS

Percentile

32.2%

Related for WPVDB-ID:F276FC61-19B2-48DC-928F-75287B3A62B8