CVE-2018-1002009

State: Published
Severity: Not scored
Published: Dec 3, 2018
Updated: Aug 5, 2024
Reserved: Dec 3, 2018

Description

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in unsubscribe.html.php:3: via GET reuqest to the email variable.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Arigato Autoresponder and NewsletterKiboko Labs https://calendarscripts.info/	2.5.1.8 and earlierAffected

References

45434exploit
https://wordpress.org/plugins/bft-autoresponder/
http://www.vapidlabs.com/advisory.php?v=203

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.