AcyMailing Vulnerabilities and Affected Products
Vulnerabilities associated with Newsletter via SMTP, Sendinblue, Sendgrid, Mailgun - AcyMailing SMTP Newsletter.
Products
Clear product- Newsletter Plugin for Joomla in the Enterprise version2 vulnerabilities
- acymailing1 vulnerability
- Newsletter Plugin for Joomla1 vulnerability
- Newsletter via SMTP, Sendinblue, Sendgrid, Mailgun - AcyMailing SMTP Newsletter1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-24288MEDIUM | AcyMailing < 7.5.0 - Unauthenticated Open RedirectWhen subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim. | CVSS6.1v3.1 | EPSS1.94% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |