Non évaluée

Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting

CVE-2023-4925 Première détection SecPulse Jan 16, 2024

Description d'origine La description telle que publiée par la source (souvent en anglais).

The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Faits clés

Gravité: Non évaluée
Publication: Jan 16, 2024
Première détection SecPulse: Jan 16, 2024

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:02