CVE-2023-28733 — Stored XSS affecting the AcyMailing plugin for Joomla

CVE-2023-28733

Stored XSS affecting the AcyMailing plugin for Joomla PUBLISHED

Description (CNA)

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0.

Affected (CNA)

Vendor / product	Versions
AcyMailing / Newsletter Plugin for Joomla in the Enterprise version	affected 0 before 8.3.0

CWE

CWE-20, CWE-116

References

https://www.acymailing.com/change-log/
https://www.bugbounty.ch/advisories/CVE-2023-28733

ADP enrichment

CVE

No English description supplied.

https://www.acymailing.com/change-log/
https://www.bugbounty.ch/advisories/CVE-2023-28733

CISA-ADP

No English description supplied.

No references supplied.