CVE-2021-28975: Wpmailster Wp Mailster

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name, or connection_parameter parameter.

Affected products

• Wpmailster Wp Mailster: version 1.6.18 only

Published 2021-10-21. Last modified 2026-06-17.