CVE-2023-5958: vulnerability in POST SMTP Mailer
POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.5%
The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users.
Affected products
Unknown · POST SMTP MailerRelated CVEs — POST SMTP Mailer
In the same product, most dangerous first.