WordPress Plugin Vulnerabilities
Mailtree Log Mail < 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Description
The plugin does not properly sanitize and escape the input received through the email subject, leading to potential Stored Cross-Site Scripting (XSS). This can result in the execution of arbitrary web scripts whenever a user accesses a compromised page.
Affects Plugins
Fixed in 1.0.1 References
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Alex Thomas
Verified
No
WPVDB ID
Timeline
Publicly Published
2023-06-20 (about 2 years ago)
Added
2023-07-12 (about 2 years ago)
Last Updated
2023-07-12 (about 2 years ago)
WPScan 