VYPR
Medium severity6.1NVD Advisory· Published Nov 27, 2023· Updated Jun 17, 2026

CVE-2023-5958

CVE-2023-5958

Description

The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.