Lucene search
PRIOn knowledge basePRION:CVE-2023-0219HistoryMar 13, 2023 - 5:15 p.m.
Cross site scripting
2023-03-1317:15:00
PRIOn knowledge base
www.prio-n.com
6
cross site scripting
fluentsmtp
wordpress plugin
xss
vulnerability
email logs
stored
exploit
html
unfiltered
0.001 Low
EPSS
Percentile
23.3%
The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (XSS) when an administrator views the email logs. This exploit requires other plugins to enable users to send emails with unfiltered HTML.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fluentsmtp | lt | 2.2.3 |
Related
wpvulndb
wpvulndb
FluentSMTP < 2.2.3 - Stored XSS via Email Logs
2023-02-20 00:00:00
wpexploit
wpexploit
FluentSMTP < 2.2.3 - Stored XSS via Email Logs
2023-02-20 00:00:00
cvelist
cvelist
CVE-2023-0219 FluentSMTP < 2.2.3 - Stored XSS via Email Logs
2023-03-13 16:03:36
cve
cve
CVE-2023-0219
2023-03-13 17:15:12
openvas
openvas
WordPress FluentSMTP Plugin < 2.2.3 XSS Vulnerability
2023-03-27 00:00:00
nvd
nvd
CVE-2023-0219
2023-03-13 17:15:12
wordfence
wordfence