CVE Database /
CVE-2022-2351
CVE · Medium
CVE-2022-2351 — Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 2.1.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-2351
|
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 2.1.4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.8
|
< 2.1.4
|
2.1.4 |
2022-08-18 |
—
|
CVE-2022-2351
The Post SMTP Mailer/Email Log plugin contains a stored cross-site scripting vulnerability in versions through 2.1.3 affecting the 'input_tmp_dir' parameter. Administrators can inject malicious scripts due to inadequate sanitization and escaping of user input. These injected scripts execute in the browsers of users who view affected pages. The vulnerability requires authenticated access with administrator privileges to exploit.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings