Skip to content
OpenAdvisories

Product · gdragon

GD Mail Queue

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.2

    GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email

    The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to …