Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: AcyMailing Newsletter Plugin for Joomla in the Enterprise version 8.3.0 Clear all filters
TI-2023-13247 CVE-2023-28733 · GHSA-3jpf-c526-5cw2

Stored XSS affecting the AcyMailing plugin for Joomla

Priority LOW 38

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.0037 Published 2023-03-30 Fixed CWE-116
TI-2023-13245 CVE-2023-28731 · GHSA-2qgx-8w4f-jc5v

Unauthenticated RCE affecting the AcyMailing plugin for Joomla

Priority MEDIUM 52

AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file upload allowing PHP code to be injected.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01782 Published 2023-03-30 Fixed CWE-20