CVE-2017-18603

MEDIUM 6.1CVE-2017-18603 · Published 10/09/2019 · updated 17/06/2026

In short

CVE-2017-18603 is a MEDIUM (CVSS 6.1) vulnerability affecting postman-smtp (postman-smtp project).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
postman-smtp postman-smtp_project	`≤ 2017-10-04`	No fix yet

The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.