Lucene search
+L

3 matches found

NVD
NVD
added 2023/03/30 12:15 p.m.26 views

CVE-2023-28733

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting XSS in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0...

7.2CVSS6.8AI score0.0037EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/03/30 11:27 a.m.39 views

CVE-2023-28733 Stored XSS affecting the AcyMailing plugin for Joomla

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting XSS in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0...

7.2CVSS7AI score0.0037EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/30 11:27 a.m.55 views

CVE-2023-28733

AnyMailing Joomla Plugin Enterprise versions prior to 8.3.0 are affected by a stored XSS in templates and emails of AcyMailing. The vulnerability is exploitable without authentication when access to the campaign creation on the front office is granted. The root cause is a stored cross-site script...

7.2CVSS6.4AI score0.0037EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder