Wp Mail Project Wp Mail vulnerabilities

1 vulnerability

Known vulnerabilities in Wp Mail Project Wp Mail, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2017-5942wordpresswp-mail+1
EPSS score
0.96%
An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS. This would allow you to execute JavaScript in the context of the user receiving the mail.