Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-10103

MailPoet < 5.3.2 - Admin+ Stored XSS

Description

In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown MailPoet

Default version status: unaffected

  • 0 to < 5.3.2affected

References