description: These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter.
problem types: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5.1.8
affected:
{
product: Arigato Autoresponder and Newsletter
vendor: Kiboko Labs https://calendarscripts.info/
versions:
lessThanOrEqual: 2.5.1.8, status: affected, version: unspecified, versionType: custom
}