| Package | Affected versions | Patched versions |
|---|---|---|
| wp mail | ≤ 1.1 |
An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS. This would allow you to execute JavaScript in the context of the user receiving the mail.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free