POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting
published November 27, 2023
CVSS
—
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is
The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.7th percentile
Published
2023-11-27T16:22Z
EPSS history
Timeline
27 NOV 16:22Z
POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting