there is a SQL injection issue in ccNewsletter. I advice everyone using a ccNewsletter version before 2.2.2 to upgrade! 

You can download ccNewsletter 2.2.3 from our downloads section here

https://www.chillcreations.com/downloads/ccnewsletter#reltabs-145-notes