Description
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Stefano Lissa | Newsletter | ≤ 9.3.3 | — |
High · 7.1
CVE-2026-66596
EUVD-2026-62374GHSA-wmvx-23w9-2238
WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability
Published Aug 19, 2026 · Updated Aug 19, 2026 · Assigned by Patchstack