https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:41:19.401416+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1889 CVE-2022-1889 — Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting 2026-10-12T06:41:19.418374+00:00

Affected: Unknown Newsletter – Send awesome emails from WordPress

The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheader_text setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed