there is a SQL injection issue in ccNewsletter. I advice everyone using a ccNewsletter version before 2.2.2 to upgrade!
You can download ccNewsletter 2.2.3 from our downloads section here.
https://www.chillcreations.com/downloads/ccnewsletter#reltabs-145-notes