The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Wpexperts |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-58229 | The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 04 Jun 2025 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Wpexperts post Smtp
|
|
| CPEs | cpe:2.3:a:wpexperts:post_smtp:*:*:*:*:*:wordpress:*:* | |
| Vendors & Products |
Wpexperts post Smtp Mailer
|
Wpexperts post Smtp
|
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2024-08-02T08:14:25.133Z
Reserved: 2023-11-03T19:08:32.554Z
Link: CVE-2023-5958
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-11-27T17:15:09.623
Modified: 2025-06-04T15:05:06.540
Link: CVE-2023-5958
Redhat
No data.
OpenCVE Enrichment
No data.