Mailster WordPress Newsletter Plugin Compatibility Tester, 35c42744-3eb8-4dff-9b8f-3c61a8f395fd
- CVE, Research URL
- Published on
- -
- Research Description
- Mailster WordPress Newsletter Plugin [mailster] < 2.4.9 Mailster Gravity Forms < 2.4.9 - Unauthenticated Stored Cross-Site Scripting (XSS) Mailster [1] is a newsletter plugin for WordPress. It allows to create, send and track the newsletter campaigns. Compass Security identified a stored Cross-Site Scripting (XSS) vulnerability affecting the administration interface. Successful exploitation requires no authentication and can be performed remotely. [1] https://codecanyon.net/item/mailster-email-newsletter-plugin-for-wordpress/3078294
- Affected versions
-
max 2.4.9.
- Status
-
vulnerable