Lucene search
HistoryMay 23, 2023 - 2:15 a.m.
CVE-2023-27922
cve-2023
newsletter
xss
vulnerability
security
remote attacker
unauthenticated
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.003 Low
EPSS
Percentile
68.4%
Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script.
Affected configurations
Node
stefano_lissa_\&_the_newsletter_teamnewsletterRange<7.6.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| thenewsletterplugin:newsletter | thenewsletterplugin newsletter | lt | 7.6.9 |
CNA Affected
[
{
"vendor": "Stefano Lissa & The Newsletter Team",
"product": "Newsletter",
"versions": [
{
"version": "versions prior to 7.6.9",
"status": "affected"
}
]
}
]Related
nuclei
nuclei
Newsletter < 7.6.9 - Cross-Site Scripting
2023-10-17 07:20:28
jvn
jvn
wpvulndb
wpvulndb
Newsletter < 7.6.9 - Reflected XSS
2023-03-27 00:00:00
cvelist
cvelist
CVE-2023-27922
2023-05-23 00:00:00
wpexploit
wpexploit
Newsletter < 7.6.9 - Reflected XSS
2023-03-27 00:00:00
prion
prion
Cross site scripting
2023-05-23 02:15:00
nvd
nvd
CVE-2023-27922
2023-05-23 02:15:09
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.003 Low
EPSS
Percentile
68.4%
Related for CVE-2023-27922