WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name, or connection_parameter parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-10-21T15:44:30
Updated: 2024-08-03T21:55:12.295Z
Reserved: 2021-03-22T00:00:00
Link: CVE-2021-28975
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-10-21T16:15:07.800
Modified: 2021-10-26T02:06:48.687
Link: CVE-2021-28975
Redhat
No data.