← Back

Jontasc

jontasc

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Sailthru Triggermail
sailthru_triggermail
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-11141
1Jontasc
1Sailthru Triggermail
Jun 17, 2026
May 15, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing CSRF protection which could allow subscribers to perform Stored Cross-Site Scripting attacks even whe...Show more
The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing CSRF protection which could allow subscribers to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).Show less
CVE-2024-4290
1Jontasc
1Sailthru Triggermail
Jun 17, 2026
May 21, 2024
N/A· v4
7.1 HIGH· v3
N/A· v2
The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the u...Show more
The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less
CVE-2024-4289
1Jontasc
1Sailthru Triggermail
Jun 17, 2026
May 21, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used a...Show more
The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as adminShow less