medium6.1
CVE-2017-5942
An issue was discovered in the WP Mail plugin before 1.2 for WordPress.
Impact
An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS. This would allow you to execute JavaScript in the context of the user receiving the mail.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wp Mail Project | Wp Mail | through 1.1 |