Skip to content
Sign in
6.1 Medium

CVE-2024-10103 In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to…

Description

In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

Affected products and versions

Product Affected versions Fixed in
MailPoet 5.3 earliest → < 5.3.2 5.3.2
MailPoet 5.3 earliest → < 5.3.2 5.3.2

Other CVEs of MailPoet

The 2 CVEs of MailPoet →
CVE-2024-12743 The MailPoet WordPress plugin before 5.5.2 does not sanitise and escape some of its settings, which could allow high… 4.8 Medium
Track this CVE