CVE-2017-18603

The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-09-10

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Postman-smtp (Postman-smtp Project)

References

• https://wordpress.org/plugins/postman-smtp/#developers
• https://www.pluginvulnerabilities.com/2017/06/29/reflected-cross-site-scripting-xss-vulnerability-in-postman-smtp/