CVE-2023-28733

—

CVSS 3.1

6.1 medium

EPSS

<1%p30

Published

Mar 30, 2023 (Mar 30, 2023)

Modified

Jun 17, 2026

Description

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0.

Vendors: acymailing
Products: acymailing
Ecosystems: Joomla
Weakness: CWE-20, CWE-116, CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.