Stored Cross-Site Scripting Vulnerability in GD Mail Queue for WordPress

CVE-2023-3122

What is CVE-2023-3122?

The GD Mail Queue plugin for WordPress is subject to a vulnerability that allows for Stored Cross-Site Scripting attacks. This flaw arises from inadequate input sanitization and output escaping measures present in versions up to and including 3.9.3. It enables unauthenticated attackers to inject malicious web scripts into email content, which can then be executed in the context of the users visiting compromised pages. This highlights the crucial need for proper security measures to be implemented in order to protect users from such exploitations.

References