Mailjet Email Marketing, fd135b6d9545f4f161ad80ad33bc776604759116

CVE, Research URL: fd135b6d9545f4f161ad80ad33bc776604759116
Home page URL: Security reports for Mailjet Email Marketing
Application: Mailjet Email Marketing
Published on: Jan 03, 2023
Research Description: Mailjet Email Marketing [mailjet-for-wordpress] < 5.3.1 Mailjet Email Marketing <= 5.3 - Authenticated (Admin+) Cross-Site Scripting The Mailjet Email Marketing plugin for WordPress is vulnerable to authenticated stored cross-site scripting in versions up to, and including, 5.3 via the 'mailjet_from_name' parameter. This allows authenticated attackers with administrator-level capabilities to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 5.3.1.
Status: vulnerable