Lucene search
PRIOn knowledge basePRION:CVE-2023-2472HistoryJun 05, 2023 - 2:15 p.m.
Cross site scripting
2023-06-0514:15:00
PRIOn knowledge base
www.prio-n.com
2
sendinblue
wordpress plugin
cross-site scripting
admin dashboard
wpml plugin
0.001 Low
EPSS
Percentile
24.8%
The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputting it back in the admin dashboard when the WPML plugin is also active and configured, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| newsletter\\,_smtp\\,_email_marketing_and_subscribe | lt | 3.1.61 |
Related
cve
cve
CVE-2023-2472
2023-06-05 14:15:10
openvas
openvas
nvd
nvd
CVE-2023-2472
2023-06-05 14:15:10
wpvulndb
wpvulndb
cvelist
cvelist
wpexploit
wpexploit