CVE-2019-11843

The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using extra parameters in the URL (Reflective…

published June 2, 2020

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using extra parameters in the URL (Reflective Server-Side XSS).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01797 · 78.3th percentile
Published
2020-06-02T16:45Z
EPSS history
Timeline
  • 02 JUN 16:45Z
    The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using extra parameters in the URL (Reflective…
    cvelistv5