CVE-2023-30489

概要

参考情報

• patchstack.com/database/vulnerability/email-subscribe/wordpress-email-subscription-popup-plugin-1-2-16-cross-site-scripting-xss-vulnerability · Vendor Advisory

email subscription popup のその他の脆弱性

• CVE-2024-11195中 6.4The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_email_subscribe_form s…
• CVE-2024-27960中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscrip…
• CVE-2023-6555中 6.1The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting it back in the page, …
• CVE-2023-6527中 6.1The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all version…