https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T15:03:09.507420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-22212 EUVD-2026-22212 2026-10-27T15:03:09.510239+00:00 EUVD-2026-22212 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21418 fkie_cve-2021-21418 2026-10-27T15:03:09.510273+00:00

ps_emailsubscription is a newsletter subscription module for the PrestaShop platform. An employee can inject javascript in the newsletter condition field that will then be executed on the front office The issue has been fixed in 2.6.1

 https://cve.radiocsirt.org/vuln/ghsa-vwfx-hh3w-fj99 GHSA-vwfx-hh3w-fj99 — Potential XSS injection in the newsletter conditions field 2026-10-27T15:03:09.510303+00:00

Affected: Packagist: prestashop/ps_emailsubscription

### Impact An employee can inject javascript in the newsletter condition field that will then be executed on the front office

### Patches The issue has been fixed in 2.6.1

 https://cve.radiocsirt.org/vuln/gsd-2021-21418 gsd-2021-21418 2026-10-27T15:03:09.510327+00:00 gsd-2021-21418