CVE-2023-27922

2023-05-2300:00:00

jpcert

www.cve.org

cross-site scripting

newsletter

vulnerability

remote attacker

arbitrary script

0.003 Low

EPSS

Percentile

68.4%

JSON

Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script.

CNA Affected

[
  {
    "vendor": "Stefano Lissa & The Newsletter Team",
    "product": "Newsletter",
    "versions": [
      {
        "version": "versions prior to 7.6.9",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN59341308/

wordpress.org/plugins/newsletter/

0.003 Low

EPSS

Percentile

68.4%

JSON

Related for CVELIST:CVE-2023-27922