CVE-2024-3075 in MM-email2image Pluginthông tin

Tóm tắt

Bởi MITRE • 26/04/2024

The MM-email2image WordPress plugin through 0.2.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Đặt trước

29/03/2024

Tiết lộ

26/04/2024

Kiểm duyệt

được chấp nhận

EPSS

0.00624

KEV

không

Các hoạt động

rất thấp

Nguồn

Want to stay up to date on a daily basis?

Enable the mail alert feature now!