Skip to content
Sign in
6.5 Medium

CVE-2024-53772 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Mail…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Mail Picker mail-picker allows DOM-Based XSS.This issue affects Mail Picker: from n/a through <= 1.0.15.

Affected products and versions

Product Affected versions Fixed in
Mail Picker 1.0 earliest → 1.0.15 No fix stated

Other CVEs of Mail Picker

The 2 CVEs of Mail Picker →
CVE-2024-54273 Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker mail-picker allows Object Injection.This… 9.8 Critical
Track this CVE