CVE-2023-27922

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 1.2%

exploitation probability

1.2%top 33% of all CVEs

observed exploitation

nono source reports it

Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script.

Affected products

References