Skip to content
Sign in
7.1 High

CVE-2024-4290 The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could…

Description

The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Affected products and versions

Product Affected versions Fixed in
Sailthru Triggermail 1.1 earliest → 1.1 No fix stated
sailthru_triggermail 1.1 earliest → 1.1 No fix stated

Other CVEs of Sailthru Triggermail

The 3 CVEs of Sailthru Triggermail →
CVE-2024-11141 The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing… 6.1 Medium CVE-2024-4289 The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before… 6.1 Medium
Track this CVE