Acymailing Newsletter Plugin For Joomla In The Enterprise Version
2 CVEs affecting Acymailing Newsletter Plugin For Joomla In The Enterprise Version. Latest disclosed: 2023-03-30. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28731 | Critical | 9.8 | 2023-03-30 | AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to un… |
CVE-2023-28733 | High | 7.2 | 2023-03-30 | AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when acce… |