CVE-2022-1889 — Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting
The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheader_text setting, which could allow high privilege users to perform Stored Cross-Site Scripti…
Published: 2022-06-20 · CVSS: Unscored
The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheader_text setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7