Skip to content
Sign in
6.1 Medium

CVE-2024-6223 The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter…

Description

The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
Send email only on Reply to My Comment 1.0 earliest → 1.0.6 No fix stated
send_email_only_on_reply_to_my_comment 1.0 earliest → 1.0.6 No fix stated

Other CVEs of Send email only on Reply to My Comment

The 2 CVEs of Send email only on Reply to My Comment →
CVE-2024-6224 The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not have CSRF check in some places, and… 5.9 Medium
Track this CVE