43 matches found
CVE-2024-33297
CVE-2024-33297 Stored Cross Site Scripting vulnerability in Microweber = 2.0.9 Summary : A Stored Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name Internal Name field in the "Add new campaign" function. Requirements ...
Improper access control in the newsletter module (see GHSA-3r9g-pfhv-3228)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-newsletter-module...
Improper access control in the newsletter module (see GHSA-3r9g-pfhv-3228)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-newsletter-module...
Improper access control in the newsletter module
Date : 2026-08-25 CVE ID : CVE-2026-104881 Description A backend user can edit recipients and send newsletters for channels they do not have permission to access. Affected versions Contao 5.0 Contao 5.1 Contao 5.2 Contao 5.3 up to 5.3.49 Contao 5.4 Contao 5.5 Contao 5.6 Contao 5.7 up to 5.7.11...
CVE-2022-31856
Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...
EUVD-2007-5434
Malware in sbrugna...
EUVD-2022-53206
Malicious code in bioql PyPI...
EUVD-2022-3919
Malicious code in bioql PyPI...
EUVD-2023-51435
Malicious code in bioql PyPI...
CVE-2025-48308 WordPress Newsletter subscription optin module plugin <= 1.2.9 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in nonletter Newsletter subscription optin module newsletter-subscription-widget-for-sendblaster allows Stored XSS.This issue affects Newsletter subscription optin module: from n/a through = 1.2.9...
Exploit for Cross-site Scripting in Microweber
CVE-2024-33297 Stored Cross Site Scripting vulnerability in Mi...
CVE-2024-33275
A SQL injection vulnerability (CWE-89) exists in the Webbax supernewsletter module (versions v.1.4.21 and before ) for the PrestaShop e-commerce solution. The flaw originates within the product_search.php component, which allows a remote attacker to escalate privileges . To remediate this, users ...
CVE-2024-33275
SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...
CVE-2024-33275: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...
PT-2022-25844 · Opencart · Opencart
Name of the Vulnerable Software and Affected Versions: OpenCart versions 3.x Description: A SQL injection issue was found in the Newsletter Custom Popup module of OpenCart. The vulnerability can be exploited via the email parameter at the "index.php?route=extension/module/so newletter custom...
CVE-2022-31856
Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...
CVE-2022-31856
Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...
CVE-2022-31856
Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...
