Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter at /index.php.
- https://www.exploit-db.com/exploits/50942
No PoCs found on GitHub currently.