Read the docs

Simplenews Scheduler Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Simplenews Scheduler Project records in CISA KEV

No Simplenews Scheduler Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 29

The Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated users with the "send scheduled newsletters" permission to inject arbitrary PHP code into the scheduling form, which is later e…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01055 Published 2012-12-03 No fix listed CWE-94
Open these records in search →