Vulnerabilities > Wpmanageninja > Fluentsmtp > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-07-12 CVE-2023-3087 Unspecified vulnerability in Wpmanageninja Fluentsmtp
The FluentSMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping.
network
low complexity
wpmanageninja
6.1
2023-03-13 CVE-2023-0219 Cross-site Scripting vulnerability in Wpmanageninja Fluentsmtp
The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (XSS) when an administrator views the email logs.
network
low complexity
wpmanageninja CWE-79
5.4