CVE-2018-1002005: Kibokolabs Arigato Autoresponder And Newsletter

Medium severity, CVSS 4.8. EPSS: 3.1% chance of exploitation in the next 30 days.

These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter.

Affected products

• Kibokolabs Arigato Autoresponder And Newsletter: from 2.5.0, before 2.5.1.5 (fixed in 2.5.1.5)

Published 2018-12-03. Last modified 2026-06-17.