Stored Cross-Site Scripting Vulnerability in WP Mail Log Plugin for WordPress

CVE-2023-3088

What is CVE-2023-3088?

The WP Mail Log plugin for WordPress is subject to a Stored Cross-Site Scripting vulnerability due to inadequate input sanitization and output escaping in email contents. This flaw grants unauthenticated attackers the opportunity to embed malicious web scripts into the plugin, which can then be executed when a user accesses affected pages. Such an exploitation could lead to significant security breaches, compromising user data and site integrity.

References