The alo-easymail plugin before 2.6.01 for WordPress has CSRF with resultant XSS in pages/alo-easymail-admin-options.php.

Published Sep 25, 2019 · Updated Aug 6, 2024 · Assigned by mitre