Known CVE
Newsletter < 7.6.9 - Cross-Site Scripting
The plugin does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators
CVE-2023-27922
Medium2023CVSS 6.1CWE-79
cve2023 · wpscan · wordpress · wp · wp-plugin · xss · newsletter · authenticated
Verified scans run this check after you prove you own the site.
All known CVEsView the checks catalogNational Vulnerability Database
Scan a website