CVE-2017-18577

The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-08-22

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Mailchimp For Wordpress (Ibericode)

References

• https://wordpress.org/plugins/mailchimp-for-wp/#developers