https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:27:05.343384+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2472 CVE-2023-2472 — Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS 2026-10-07T21:27:05.359711+00:00

Affected: Unknown Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputting it back in the admin dashboard when the WPML plugin is also active and configured, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin