Lucene search
+L

CVE-2023-27922

🗓️ 23 May 2023 00:00:00Reported by jpcertType 
cve
 cve
🔗 web.nvd.nist.gov👁 107 Views🌐 WEB

Cross-site scripting vuln. in Newsletter < 7.6.9, allows remote unauthenticated attacker

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2023-27922
23 May 202302:15
–attackerkb
bdu_fstec
BDU FSTEC
WordPress Newsletter Plugin XSS
22 Nov 202300:00
–bdu_fstec
circl
Circl
CVE-2023-27922
17 Jan 202517:57
–circl
cnnvd
CNNVD
WordPress plugin Newsletter cross-site scripting vulnerability
23 May 202300:00
–cnnvd
cvelist
Cvelist
CVE-2023-27922
23 May 202300:00
–cvelist
euvd
EUVD
EUVD-2023-31648
3 Oct 202520:07
–euvd
jvn
Japan Vulnerability Notes
JVN#59341308: WordPress Plugin "Newsletter" vulnerable to cross-site scripting
9 May 202300:00
–jvn
jvn
Japan Vulnerability Notes
WordPress Plugin "Newsletter" vulnerable to cross-site scripting
9 May 202305:42
–jvn
mend
Mend
CVE-2023-27922
23 May 202300:00
–mend
nuclei
Nuclei
Newsletter < 7.6.9 - Cross-Site Scripting
3 Nov 202602:03
–nuclei
Rows per page
NVD
Node
thenewsletterpluginnewsletterRange<7.6.9wordpress
[
  {
    "vendor": "Stefano Lissa & The Newsletter Team",
    "product": "Newsletter",
    "versions": [
      {
        "version": "versions prior to 7.6.9",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
aquery param/wp-admin/admin.phpReflected cross-site scripting due to unescaped generated URLs output in attributes in Newsletter plugin; allows script execution when an admin visits a crafted URL.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 05:46Current
6.3Medium risk
Vulners AI Score6.3
CVSS 3.16.1
EPSS0.01198
SSVC
107