Aller au contenu
Se connecter
6.1 Moyenne

CVE-2024-10103 In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to…

Description

In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

Produits et versions touchés

Produit Versions touchées Corrigé en
MailPoet 5.3 premières → < 5.3.2 5.3.2
MailPoet 5.3 premières → < 5.3.2 5.3.2

Autres CVE de MailPoet

Les 2 CVE de MailPoet →
CVE-2024-12743 The MailPoet WordPress plugin before 5.5.2 does not sanitise and escape some of its settings, which could allow high… 4.8 Moyenne
Suivre cette CVE