Sailthru Triggermail, CVE-2024-11141

CVE, Research URL: CVE-2024-11141
Home page URL: Security reports for Sailthru Triggermail
Application: Sailthru Triggermail
Published on: May 16, 2025
Research Description: The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing CSRF protection which could allow subscribers to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Affected versions: max 1.1.
Status: vulnerable