CVE-2021-21418

psemailsubscription is a newsletter subscription module for the PrestaShop platform. An employee can inject javascript in the newsletter condition field that will then be executed on the front office The issue has been fixed in 2.6.1...

PT-2021-14492

Name of the Vulnerable Software and Affected Versions ps emailsubscription versions prior to 2.6.1 Description The issue allows an employee to inject javascript in the newsletter condition field, which will then be executed on the front office. Recommendations For versions prior to 2.6.1, update ...

LocalTapiola: Enumeration in unsubscribe -function of /omatalousuk (viestinta.lahitapiola.fi)

Hi, I would like to report an issue where malicious user can unsubscribe any customer email subscription from viestinta.lahitapiola.fi. I am not sure if this in scope, but i took the liberty to bring forward to you, so that you can fix the bug. Impact Subscribe or unsubscribe is always a...