Aller au contenu
Se connecter
6.1 Moyenne

CVE-2024-11141 The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing…

Description

The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing CSRF protection which could allow subscribers to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Produits et versions touchés

Produit Versions touchées Corrigé en
Sailthru Triggermail 1.1 premières → 1.1 Pas de correctif indiqué

Autres CVE de Sailthru Triggermail

Les 3 CVE de Sailthru Triggermail →
CVE-2024-4289 The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before… 6.1 Moyenne CVE-2024-4290 The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could… 7.1 Élevée
Suivre cette CVE