Skip to content
OpenAdvisories

Vendor

hanif-khan

1 known vulnerabilities.

Products

Newsletter Subscriptions 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2024-11683

    Newsletter Subscriptions <= 2.1 - Reflected Cross-Site Scripting

    The Newsletter Subscriptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_type' parameter in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for u…

    hanif-khan Newsletter Subscriptions Web / CMS