Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.23.11.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SendPress | SendPress Newsletters | ≤ 1.23.11.6 | — |
High · 7.1
CVE-2023-47517
EUVD-2023-51628GHSA-2h5r-mrp2-g8m3
WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)
Published Nov 14, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack