Fw Integration For Emailoctopus Vulnerabilities

The EO4WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that wil...

CVSS:

6.4

Affected:

up to 1.0.8.4

Fixed in:

1.0.8.5

Disclosed:

Mar 27, 2025

CVE-2025-30763 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Olaf Lederer EO4WP allows Stored XSS. This issue affects EO4WP: from n/a through 1.0.8.4.

Affected:

up to 1.0.8.5

Fixed in:

1.0.8.5

Disclosed:

Mar 27, 2025

CVE-2025-30763 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Olaf Lederer EO4WP allows Stored XSS.This issue affects EO4WP: from n/a through 1.0.7.

Affected:

up to 1.0.8.2

Fixed in:

1.0.8.2

Disclosed:

Jan 7, 2025

CVE-2025-22327 on NVD →

The EO4WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that wil...

CVSS:

6.4

Affected:

up to 1.0.8.1

Fixed in:

1.0.8.2

Disclosed:

Jan 3, 2025

CVE-2025-22327 on NVD →