CVE-2022-1889

The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheadertext setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed...

PT-2022-14173

Name of the Vulnerable Software and Affected Versions The Newsletter WordPress plugin versions prior to 7.4.6 Description The issue concerns a Stored Cross-Site Scripting attack. High privilege users could exploit this when the unfilteredhtml is disallowed, due to the lack of proper escaping and...

WordPress plugin Newsletter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. cross-site scripting...