WordPress Mailster 1.5.4 and before contains a cross-site scripting vulnerability in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view