CVE-2023-47517
WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)
概要
WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.23.11.6 versions.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory patchstack.com
- web wordpress.org