Email Subscribers Newsletters Project Email Subscribers Newsletters vulnerabilities

1 known vulnerability affecting email_subscribers_newsletters_project/email_subscribers_newsletters.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-0602MEDIUMCVSS 6.1fixed in 3.5.02018-06-26

CVE-2018-0602 [MEDIUM] CWE-79 CVE-2018-0602: Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.