Skip to content
Sign in
4.8 Medium

CVE-2023-4925 The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which…

Description

The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Affected products and versions

Product Affected versions Fixed in
Easy Forms for Mailchimp 6.8 earliest → 6.8.10 No fix stated

Other CVEs of Easy Forms for Mailchimp

The 6 CVEs of Easy Forms for Mailchimp →
CVE-2023-1323 The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters,… 4.8 Medium CVE-2023-2518 The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape a parameter before outputting it… 6.1 Medium CVE-2023-1324 The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before… 6.1 Medium CVE-2023-1325 The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes… 5.4 Medium
Track this CVE