CVE-2026-73393 Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.

Affected products and versions

Product	Affected versions	Fixed in
Subscribe2 10.46	earliest → 10.46	No fix stated

Other CVEs of Subscribe2

The 2 CVEs of Subscribe2 →

CVE-2026-24944 Missing Authorization vulnerability in weDevs Subscribe2 subscribe2 allows Exploiting Incorrectly Configured Access… 6.5 Medium