CVE-2017-5942

An issue was discovered in the WP Mail plugin before 1.2 for WordPress

published February 10, 2017

CVSS
—
EPSS
1%
Percentile
60.9
In the wild
Unconfirmed
What it is

An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS. This would allow you to execute JavaScript in the context of the user receiving the mail.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00957 · 60.9th percentile
Published
2017-02-10T06:51Z
EPSS history
Timeline
  • 10 FEB 06:51Z
    An issue was discovered in the WP Mail plugin before 1.2 for WordPress
    cvelistv5