未評価
Easy Forms for MailChimp < 6.8.8 - Reflected XSS
CVE-2023-1324
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before outputting them back in the response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report wpscan.com
- web wordpress.org