MailPoet – Newsletters, Email Marketing, and Automation, CVE-2024-10103
- CVE, Research URL
- Published on
- Nov 19, 2024
- Research Description
- In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor
- Affected versions
-
Min -, max 5.3.2.
- Status
-
vulnerable