Threats tagged 'ghsa-37r8-fq3j-qq4r'

The Postie plugin for WordPress versions up to and including 1.9.87 is vulnerable to stored cross-site scripting (XSS) via the Email Body URL Autolink feature. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts. The ?postie=get-mail endpoint is accessible without authentication or capability checks, and the email processing removes WordPress's kses filters, enabling raw markup with unescaped href attributes to be stored as post content. This can lead to script execution when users access the injected content.