Read the docs

Email-subscriber Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Email-subscriber Project records in CISA KEV

No Email-subscriber Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email-subscriber 1 record LOW

Records

1 record

TI-2021-06841 CVE-2021-24556 · GHSA-559v-8mcf-64p4

Email Subscriber <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

Priority LOW 30

The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sanitise, validate and escape the submitted subscribe_email and subscribe_name POST parameters, insertin…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01344 Published 2021-08-23 No fix listed CWE-79
Open these records in search →