Stefano Lissa

3 CVEs in 2 Stefano Lissa products, including Newsletter, Include Me. Newest: CVE-2026-66596 (2026-08-19). Severity, EPSS and public exploits for each.

Stefano Lissa products with known CVEs

ProductCVEs
Newsletter2
Include Me1
Stefano Lissa CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66596High7.12026-08-19Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
CVE-2025-67999High7.62025-12-16Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stefano Lissa Newsletter newsletter allows Blind SQL Inje…
CVE-2025-58983Medium5.92025-09-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefano Lissa Include Me include-me allows Stored XSS.Thi…