CVE-2026-66596

Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.

Score

CVSS 3.1 7.1 High

Status

Deferred - audit@patchstack.com

Published

2026-08-19

Last modified

2026-08-19

Weaknesses

CWE-79

Affected products

• Newsletter (Stefano Lissa)

References

• https://patchstack.com/database/wordpress/plugin/newsletter/vulnerability/wordpress-newsletter-plugin-9-3-3-cross-site-…