CVE-2024-10103 — MailPoet < 5.3.2 - Admin+ Stored XSS
In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding mal…
Published: 2024-11-19 · CVSS: 6.1 · CVSS 3.1
In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7