PT-2023-16896 · WordPress · Easy Forms For Mailchimp

·

CVE-2023-1324

·

Publicado

2023-04-24

·

Atualizado

2023-05-02

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Easy Forms for Mailchimp WordPress plugin versions prior to 6.8.8
Description The issue is related to a Reflected Cross-Site Scripting problem, where some parameters are not properly sanitised and escaped before being outputted in the response. This could be exploited against high-privilege users, such as administrators.
Recommendations For versions prior to 6.8.8, update to version 6.8.8 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2023-1324

Produtos afetados

Easy Forms For Mailchimp