CVE-2023-39971

Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

State: Published
Severity: Not scored
Published: Aug 17, 2023
Updated: Oct 20, 2024
Reserved: Aug 7, 2023

Description

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
AcyMailing Enterprise component for Joomlaacymailing.com	6.7.0-8.6.3Affected

References

https://extensions.joomla.org/extension/acymailing-starter/product
https://www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.