Non évaluée

Post SMTP < 2.8.7 - Reflected Cross-Site Scripting

CVE-2023-6621 Première détection SecPulse Jan 3, 2024

Description d'origine La description telle que publiée par la source (souvent en anglais).

The POST SMTP WordPress plugin before 2.8.7 does not sanitise and escape the msg parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Faits clés

Gravité: Non évaluée
Publication: Jan 3, 2024
Première détection SecPulse: Jan 3, 2024

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:55