CVE-2023-27922 (published 2023-05-23T00:00:00)
Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script.
Affected products: Vendor: Stefano Lissa & The Newsletter Team
Product: Newsletter
Versions: versions prior to 7.6.9