CVE-2017-18010 Smart Marketing SMS and Newsletters Forms < 2.0.0 - Cross-Site Scripting
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| e-goi smart marketing sms and newsletters forms | < 2.0.0 | 2.0.0 |
| wordpress smart-marketing-for-wp(WordPress) | < 2.0.0 | 2.0.0 |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- wordpress.org release-notes third-party-advisory
- wpvulndb.com exploit third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org