Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2025-23602
Disclosure Date: January 22, 2025 (last updated January 23, 2025)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EELV Newsletter allows Reflected XSS. This issue affects EELV Newsletter: from n/a through 4.8.2.
0
Attacker Value
Unknown
CVE-2024-54430
Disclosure Date: December 16, 2024 (last updated December 18, 2024)
Cross-Site Request Forgery (CSRF) vulnerability in Bastien Ho EELV Newsletter allows Cross Site Request Forgery.This issue affects EELV Newsletter: from n/a through 4.8.2.
0
Attacker Value
Unknown
CVE-2013-10028
Disclosure Date: June 04, 2023 (last updated October 08, 2023)
A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress. It has been rated as problematic. Affected by this issue is the function style_newsletter of the file lettreinfo.php. The manipulation of the argument email leads to cross site scripting. The attack may be launched remotely. The name of the patch is 3339b42316c5edf73e56eb209b6a3bb3e868d6ed. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230660.
0
Attacker Value
Unknown
CVE-2017-18522
Disclosure Date: August 20, 2019 (last updated November 27, 2024)
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
0
Attacker Value
Unknown
CVE-2017-18523
Disclosure Date: August 20, 2019 (last updated November 27, 2024)
The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
0
