Aller au contenu
Se connecter
7.2 Élevée

CVE-2023-3081 The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions…

Description

The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.11.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: An incomplete fix was released in 1.11.1.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Mail Logging 1.11 premières → 1.11.1 Pas de correctif indiqué

Autres CVE de WP Mail Logging

Les 3 CVE de WP Mail Logging →
CVE-2026-109401 The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… 2.7 Faible CVE-2026-2471 The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,… 7.5 Élevée
Suivre cette CVE