Medium severity6.1NVD Advisory· Published Jan 1, 2018· Updated Jun 17, 2026

CVE-2017-18010

Description

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Egoi For Wpinferred
Range: <2.0.0
Package: https://wordpress.org/plugins/egoi-for-wp
WordPress/Smart Marketing SMS and Newsletters Formsllm-create
Range: <2.0.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/145217/WordPress-Smart-Marketing-SMS-And-Newsletters-Forms-1.1.1-XSS.htmlnvdExploitThird Party AdvisoryVDB Entry
wpvulndb.com/vulnerabilities/8974nvdExploitThird Party AdvisoryVDB Entry
wordpress.org/plugins/smart-marketing-for-wp/nvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000