Description The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book. References https://wordpress.org/plugins/eelv-newsletter/#developers