VULNERABILITY INTELLIGENCE

CVE-2024-10103

CVSS score6.1 MEDIUM

EPSS probability0.37%

CISA KEVNot currently listed

Published2024-11-19

Last modified2026-06-17

Description

In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor