Newsletter Module Project Newsletter Module — known CVE vulnerabilities

Every CVE whose affected-product data names Newsletter Module Project Newsletter Module, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-31856 — CVSS 9.8 (critical): Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter at /index.php.