https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T12:21:48.959024+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1756 CVE-2022-1756 — Newsletter < 7.4.5 - Reflected Cross-Site Scripting 2026-10-12T12:21:48.991367+00:00

Affected: Unknown Newsletter – Send awesome emails from WordPress

The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER['REQUEST_URI'] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.