6.1
Medium
CVE-2023-1324 The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before…
Description
The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before outputting them back in the response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Easy Forms for Mailchimp 6.8 | earliest → < 6.8.8 | 6.8.8 |
Other CVEs of Easy Forms for Mailchimp
The 6 CVEs of Easy Forms for Mailchimp →
CVE-2023-4925
The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which…
4.8
Medium
CVE-2023-1323
The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters,…
4.8
Medium
CVE-2023-2518
The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape a parameter before outputting it…
6.1
Medium
CVE-2023-1325
The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes…
5.4
Medium