extensions.joomla.orgproduct
https://extensions.joomla.org/extension/acymailing-starter CVE-2023-39971
MEDIUM
Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3
Record summary
CVE-2023-39971 has a selected CVSS score of 6.1 (medium).
Description
Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 15, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
AcyMailing Enterprise component for JoomlaBrowse acymailing.com / AcyMailing Enterprise component for Joomlacom_acymailingDefault status: unaffected | CVE List | 6.7.0-8.6.3 | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-39971 acymailing.comVendor advisory
https://www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates