CVE-2023-38474

MEDIO 6.1CVE-2023-38474 · Published 30/11/2023 · updated 17/06/2026

In breve

CVE-2023-38474 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda campaign monitor (campaignmonitor).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.41%, superiore al 35.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
campaign monitor campaignmonitor	`≤ 2.8.12`	No fix yet

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Reflected XSS.This issue affects Campaign Monitor for WordPress: from n/a through 2.8.12.

References

patchstack.com/database/vulnerability/forms-for-campaign-monitor/wordpress-campaign-monitor-for-wordpress-plugin-2-8-12-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free