CVSS Score of 10 (low)


Published Jul 12, 2023
Updated: Nov 7, 2023


The Mailtree Log Mail plugin for WordPress is vulnerable to a Stored Cross-Site Scripting (XSS) attack through an email subject. This vulnerability affects versions up to and including 1.0.0 of the plugin. The issue arises due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts that will execute when a user accesses the injected page. The vulnerability has been assigned the CVE-2023-3135 identifier and has a risk score of 27. To remediate this vulnerability, users of the affected plugin should update to a patched version as soon as it becomes available. The potential danger posed by this vulnerability is that it could allow attackers to bypass security measures, compromise user data, and potentially execute malicious code on vulnerable WordPress sites.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-3135 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options