Description
The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Design Maps & Places Cross-Site Scripting (1.2)
WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection (2.1.77)
WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (5.6.1)
WordPress Plugin Related Posts Cross-Site Scripting (5.12.91)
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Cross-Site Request Forgery (2.0.1.6)