Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3jpf-c526-5cw2

Опубликовано: 30 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0.

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0.

EPSS

Процентиль: 37%
0.00157
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.2
nvd
почти 3 года назад

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0.

EPSS

Процентиль: 37%
0.00157
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79