CVE-2023-0219: FluentSMTP < 2.2.3 - Stored XSS via Email Logs
The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (XSS) when an administrator views the email logs. This exploit requires other plugins to enable users to send emails with unfiltered HTML.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-0219?
The severity of CVE-2023-0219 is classified as medium due to its potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2023-0219?
To fix CVE-2023-0219, update the FluentSMTP WordPress plugin to version 2.2.3 or later.
Who is affected by CVE-2023-0219?
CVE-2023-0219 affects users of the FluentSMTP WordPress plugin versions prior to 2.2.3.
What type of vulnerability is CVE-2023-0219?
CVE-2023-0219 is a stored cross-site scripting (XSS) vulnerability.
What can attackers do with CVE-2023-0219?
Attackers can exploit CVE-2023-0219 to execute malicious scripts in the context of the administrator when viewing email logs.