PT-2020-7608

Name of the Vulnerable Software and Affected Versions Advanced Newsletter Magento extension versions prior to 2.3.5 Description The issue exists due to SQL Injection in the Advanced Newsletter Magento extension. This can be exploited via the "/store/advancednewsletter/index/subscribeajax/an...