An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS. This would allow you to execute JavaScript in the context of the user receiving the mail.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-02-10T06:51:00
Updated: 2024-08-05T15:18:48.914Z
Reserved: 2017-02-09T00:00:00
Link: CVE-2017-5942
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-02-10T07:59:00.200
Modified: 2024-11-21T03:28:43.083
Link: CVE-2017-5942
Redhat
No data.