CVE-2017-18603 – Postman SMTP <= 1.7.2 - Reflected Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2017-18603

The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter. El plugin postman-smtp hasta el 04-10-2017 para WordPress, presenta una vulnerabilidad de tipo XSS por medio del parámetro page de wp-admin/tools.php?page=postman_email_log. The postman-smtp plugin through 1.7.2 for WordPress has XSS via the wp-admin/tools.php? • https://wordpress.org/plugins/postman-smtp/#developers https://www.pluginvulnerabilities.com/2017/06/29/reflected-cross-site-scripting-xss-vulnerability-in-postman-smtp • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •