PHP| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| yikesinc/yikes-inc-easy-mailchimp-extender |
| composer |
| < 6.8.6 |
| 6.8.6 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from two key issues: 1) Unsanitized storage of user input from $_POST into $form_data (no sanitize_text_field), and 2) Direct output of these values in HTML contexts without escaping (no esc_attr/wp_kses_post). The commit diff shows these were fixed by adding input sanitization and output escaping, confirming these code patterns as the root cause.
KEV Misses 88% of Exploited CVEs- Get the report
