TI-2024-10829 CVE-2024-11683 · GHSA-m8r2-hpvv-53w3
Newsletter Subscriptions <= 2.1 - Reflected Cross-Site Scripting
Priority LOW 27
The Newsletter Subscriptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_type' parameter in all versions up to, and including, 2.1 due to insufficient input sanitization and output…