Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through <= 4.14.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
Tribulant Software Newsletters Lite WordPress plugin contains critical XSS vulnerability affecting versions up to 4․14, assigned CVE-2026-57394 with CVSS 7․1 https://ift.tt/o612tRZ
Post summary
A critical XSS vulnerability (CVE-2026-57394) affecting Tribulant Newsletters Lite WordPress plugin up to version 4.14 has been disclosed with a CVSS score of 7.1.
🚨 HIGH Severity CVE-2026-57394 (CVSS 7.1) Reflected XSS in Tribulant Newsletters plugin (WordPress) ≤4.14 Network exploitable, no privileges required. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/oaVk9df3nc
Post summary
A high‑severity Reflected XSS flaw (CVE‑2026‑57394) in Tribulant Newsletters WP plugin (≤4.14) is exploitable over the network without privileges; users are urged to apply the available patch immediately.