← All advisories

Medium severity6.1NVD Advisory· Published May 23, 2023· Updated Jun 17, 2026

CVE-2023-27922

CVE-2023-27922

Description

Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Newsletterllm-fuzzy
Range: <7.6.9
Package: https://wordpress.org/plugins/newsletter
Stefano Lissa & The Newsletter Team/Newsletterv5
Range: versions prior to 7.6.9

Patches

Vulnerability mechanics

References

2

jvn.jp/en/jp/JVN59341308/nvdThird Party Advisory
wordpress.org/plugins/newsletter/nvdProduct

News mentions

0

No linked articles in our index yet.