CVE-2012-2579 WP SimpleMail <= 1.0.6 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) To, (2) From, (3) Date, or (4) Subject field of an email.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wp simplemail project wp simplemail | = 1.0.6 | No fix listed |
| wordpress wp-simplemail(WordPress) | <= 1.0.6 | No fix listed |
References
- 84534 vdb-entry
- 50208 third-party-advisory
- 20361 exploit
- 54905 exploit vdb-entry
- simplemail-wordpress-xss(77538) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org