cleantalk
Vulnerabilities and Security Researches

Newsletter subscription optin module, CVE-2025-48308

CVE, Research URL

CVE-2025-48308

Published on
Aug 28, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in nonletter Newsletter subscription optin module allows Stored XSS. This issue affects Newsletter subscription optin module: from n/a through 1.2.9.
Affected versions
Min -, max 1.2.9.
Status
vulnerable