CVE-2017-18010: E-Goi Smart Marketing Sms And Newsletters Forms

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url parameter.

Affected products

• E-Goi Smart Marketing Sms And Newsletters Forms: before 2.0.0 (fixed in 2.0.0)

Published 2018-01-01. Last modified 2026-06-17.