← All advisories

Medium severity6.1NVD Advisory· Published Dec 7, 2017· Updated Jun 17, 2026

CVE-2017-17451

CVE-2017-17451

Description

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Wpmailster/Wp Mailster
cpe:2.3:a:wpmailster:wp_mailster:*:*:*:*:*:wordpress:*:*
Range: <1.5.5
WordPress/Wp Mailsterllm-fuzzy
Range: <1.5.5
Package: https://wordpress.org/plugins/wp-mailster

Patches

Vulnerability mechanics

References

3

packetstormsecurity.com/files/145222/WordPress-WP-Mailster-1.5.4.0-Cross-Site-Scripting.htmlnvdThird Party AdvisoryVDB Entry
wordpress.org/plugins/wp-mailster/nvdVendor Advisory
wpvulndb.com/vulnerabilities/8973nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.