1 result · Clear filters · Feed
-
High 7.2
GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email
The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to …