Lucene search
WpvulndbWPEX-ID:EB6FF6F0-60FE-4345-B443-97FD4800418CHistoryMar 27, 2023 - 12:00 a.m.
Newsletter < 7.6.9 - Reflected XSS
2023-03-2700:00:00
wpvulndb
73
newsletter
reflection
xss
admin
exploit
security
0.003 Low
EPSS
Percentile
68.4%
The plugin does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators
Make a logged in admin open https://example.com/wp-admin/admin.php?page=newsletter_system_status&a"><script>alert(/XSS/)</script>References
Related
cve
cve
CVE-2023-27922
2023-05-23 02:15:09
nuclei
nuclei
Newsletter < 7.6.9 - Cross-Site Scripting
2023-10-17 07:20:28
cvelist
cvelist
CVE-2023-27922
2023-05-23 00:00:00
jvn
jvn
wpvulndb
wpvulndb
Newsletter < 7.6.9 - Reflected XSS
2023-03-27 00:00:00
prion
prion
Cross site scripting
2023-05-23 02:15:00
nvd
nvd
CVE-2023-27922
2023-05-23 02:15:09