CVE-2022-31856: Newsletter Module Project Newsletter Module

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter at /index.php.

Affected products

• Newsletter Module Project Newsletter Module: version 3.0.2.0 only

Published 2022-07-05. Last modified 2026-06-17.