Aller au contenu
Se connecter
Non notée

CVE-2022-2372 The YaySMTP WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high…

Description

The YaySMTP WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)

Produits et versions touchés

Produit Versions touchées Corrigé en
YaySMTP – Simple WP SMTP Mail 2.2 premières → < 2.2.2 2.2.2

Autres CVE de YaySMTP – Simple WP SMTP Mail

Les 3 CVE de YaySMTP – Simple WP SMTP Mail →
CVE-2022-2371 The YaySMTP WordPress plugin before 2.2.1 does not have proper authorisation when saving its settings, allowing users… Non notée CVE-2022-2369 The YaySMTP WordPress plugin before 2.2.1 does not have capability check in an AJAX action, allowing any logged in… Non notée
Suivre cette CVE