Advisories · Technology

AcyMailing Newsletter Plugin for Joomla in the Enterprise version.

Every CVE that names AcyMailing Newsletter Plugin for Joomla in the Enterprise version among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-28733 CVE record

CVSS 7.2 High

Stored XSS affecting the AcyMailing plugin for Joomla
- AcyMailing Newsletter Plugin for Joomla in the Enterprise version
- CWE-20
- CWE-116
Not analysed yet 30 Mar 2023
CVE-2023-28731 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated RCE affecting the AcyMailing plugin for Joomla
- AcyMailing Newsletter Plugin for Joomla in the Enterprise version
- Unrestricted file upload
- CWE-20
Not analysed yet 30 Mar 2023