Lucene search
HistoryMay 23, 2023 - 2:15 a.m.
CVE-2023-27922
vulnerability
remote attacker
script injection
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.003 Low
EPSS
Percentile
68.4%
Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script.
Affected configurations
Node
thenewsletterpluginnewsletterRange<7.6.9wordpress
Related
cve
cve
CVE-2023-27922
2023-05-23 02:15:09
nuclei
nuclei
Newsletter < 7.6.9 - Cross-Site Scripting
2023-10-17 07:20:28
cvelist
cvelist
CVE-2023-27922
2023-05-23 00:00:00
jvn
jvn
wpvulndb
wpvulndb
Newsletter < 7.6.9 - Reflected XSS
2023-03-27 00:00:00
wpexploit
wpexploit
Newsletter < 7.6.9 - Reflected XSS
2023-03-27 00:00:00
prion
prion
Cross site scripting
2023-05-23 02:15:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.003 Low
EPSS
Percentile
68.4%
Related for NVD:CVE-2023-27922