CVE-2023-3135
CVSS Score of 10 (low)
Details
Summary
The Mailtree Log Mail plugin for WordPress is vulnerable to a Stored Cross-Site Scripting (XSS) attack through an email subject. This vulnerability affects versions up to and including 1.0.0 of the plugin. The issue arises due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts that will execute when a user accesses the injected page. The vulnerability has been assigned the CVE-2023-3135 identifier and has a risk score of 27. To remediate this vulnerability, users of the affected plugin should update to a patched version as soon as it becomes available. The potential danger posed by this vulnerability is that it could allow attackers to bypass security measures, compromise user data, and potentially execute malicious code on vulnerable WordPress sites.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions