Skip to content
Sign in
6.1 Medium

CVE-2024-4289 The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before…

Description

The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
Sailthru Triggermail 1.1 earliest → 1.1 No fix stated

Other CVEs of Sailthru Triggermail

The 3 CVEs of Sailthru Triggermail →
CVE-2024-11141 The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing… 6.1 Medium CVE-2024-4290 The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could… 7.1 High
Track this CVE