Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2025/12/17 10:3 a.m.1 views

CVE-2025-67999

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Stefano Lissa Newsletter newsletter allows Blind SQL Injection.This issue affects Newsletter: from n/a through = 9.0.9...

7.6CVSS7.7AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/16 9:31 a.m.1 views

EUVD-2025-203555

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Stefano Lissa Newsletter newsletter allows Blind SQL Injection.This issue affects Newsletter: from n/a through = 9.0.9...

7.1AI score0.00032EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.3 views

PT-2025-51443

Name of the Vulnerable Software and Affected Versions Stefano Lissa Newsletter versions through 9.0.9 Description A flaw exists in Stefano Lissa Newsletter that allows for Blind SQL Injection due to Improper Neutralization of Special Elements used in an SQL Command. This issue could potentially...

7.6CVSS7.4AI score0.00032EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-11758

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00367EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-28442

Malicious code in bioql PyPI...

5.3CVSS8.7AI score0.00102EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-31648

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.03868EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.2 views

CubeCart 安全漏洞

CubeCart is an e-commerce software from CubeCart Open Source. A security vulnerability exists in CubeCart versions prior to 6.5.11, which stems from a logic flaw in the newsletter subscription endpoint that could result in unsubscribing without user consent...

6.5CVSS6.4AI score0.00097EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/23 6:57 a.m.4 views

CVE-2024-43287

Cross-Site Request Forgery CSRF vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/a through 3.1.82...

8.8CVSS7AI score0.0013EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:27 a.m.3 views

CVE-2023-27922

Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script...

6.1CVSS6.6AI score0.03868EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:19 p.m.3 views

CVE-2021-21418

psemailsubscription is a newsletter subscription module for the PrestaShop platform. An employee can inject javascript in the newsletter condition field that will then be executed on the front office The issue has been fixed in 2.6.1...

5.4CVSS6.8AI score0.00264EPSS
Exploits0References1
NVD
NVD
added 2025/01/22 3:15 p.m.4 views

CVE-2025-23602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Reflected XSS.This issue affects EELV Newsletter: from n/a through = 4.8.2...

7.1CVSS0.00346EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/16 2:13 p.m.13 views

CVE-2024-54430 WordPress EELV Newsletter plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Cross Site Request Forgery.This issue affects EELV Newsletter: from n/a through = 4.8.2...

5.4CVSS0.00093EPSS
Exploits0References1
OSV
OSV
added 2023/05/23 2:15 a.m.0 views

CVE-2023-27922

Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script...

6.1CVSS6.5AI score0.03868EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/05/23 12:0 a.m.7 views

CVE-2023-27922

Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script...

6.6AI score0.03868EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/04/07 12:0 a.m.3 views

WordPress Plugin Arigato Autoresponder and Newsletter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.4AI score0.00181EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/12/14 12:0 a.m.6 views

CVE-2022-47411

An issue was discovered in the fpnewsletter aka Newsletter subscriber management extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations...

9.1CVSS9.2AI score0.0043EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/07/05 12:0 a.m.2 views

Newsletter SQL注入漏洞

Newsletter is a one-click bulk email solution. A security vulnerability exists in the Newsletter v3.x series of releases that stems from a security issue with the zemeznewsletteremail parameter...

9.8CVSS8.3AI score0.00307EPSS
Exploits1References3
Openbugbounty
Openbugbounty
added 2018/04/12 10:9 a.m.7 views

mis.pniewy.wlkp.pl XSS vulnerability

Open Bug Bounty ID: OBB-600876 Description| Value ---|--- Affected Website:| mis.pniewy.wlkp.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Openbugbounty
Openbugbounty
added 2018/03/26 10:41 a.m.8 views

vitoshop.pl XSS vulnerability

Open Bug Bounty ID: OBB-591936 Description| Value ---|--- Affected Website:| vitoshop.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/01/27 7:35 a.m.12 views

firegirls.net XSS vulnerability

Open Bug Bounty ID: OBB-548000 Description| Value ---|--- Affected Website:| firegirls.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
Exploits0
Rows per page
Query Builder