WordPress Vulnerabilities
WP < 6.0.3 - Stored XSS via wp-mail.php
Description
WordPress does not properly sanitize some parameters when receiving a post by email, which could lead to Stored Cross-Site Scripting issue
References
Classification
Miscellaneous
Original Researcher
Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. via JPCERT
Verified
No
Timeline
Publicly Published
2022-10-17 (about 3 months ago)
Added
2022-10-18 (about 3 months ago)
Last Updated
2022-10-18 (about 3 months ago)