CVE-2018-1002006: Kibokolabs Arigato Autoresponder And Newsletter

Medium severity, CVSS 4.8. EPSS: 2.6% chance of exploitation in the next 30 days.

These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14: via POST request variable classes

Affected products

  • Kibokolabs Arigato Autoresponder And Newsletter: from 2.5.0, before 2.5.1.5 (fixed in 2.5.1.5)

Published 2018-12-03. Last modified 2026-06-17.