Stefano Lissa The Newsletter Team Newsletter vulnerabilities

3 known vulnerabilities affecting stefano_lissa_the_newsletter_team/newsletter.

Total CVEs

3

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2024-30522MEDIUMCVSS 5.3≥ n/a, ≤ 8.2.02024-05-17

CVE-2024-30522 [MEDIUM] CWE-290 CVE-2024-30522: Authentication Bypass by Spoofing vulnerability in Stefano Lissa & The Newsletter Team Newsletter al Authentication Bypass by Spoofing vulnerability in Stefano Lissa & The Newsletter Team Newsletter allows Functionality Bypass.This issue affects Newsletter: from n/a through 8.2.0.

CVE-2024-31434MEDIUMCVSS 5.4≥ n/a, ≤ 8.0.62024-04-15

CVE-2024-31434 [MEDIUM] CWE-352 CVE-2024-31434: Cross-Site Request Forgery (CSRF) vulnerability in Stefano Lissa & The Newsletter Team Newsletter.Th Cross-Site Request Forgery (CSRF) vulnerability in Stefano Lissa & The Newsletter Team Newsletter.This issue affects Newsletter: from n/a through 8.0.6.

CVE-2023-27922MEDIUMCVSS 6.1PoCvversions prior to 7.6.92023-05-23

CVE-2023-27922 [MEDIUM] CWE-79 CVE-2023-27922: Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthentic Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script.