Security Advisory

CVE-2012-2579

4.3

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) To, (2) From, (3) Date, or (4) Subject field of an email.
Published Date June 20, 2014
Official Source NIST NVD Advisory