Description
SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.
Unscored
CVE-2014-1634
EUVD-2014-1708GHSA-pr7r-fmcf-pf29
SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_categor…
Published Mar 9, 2020 · Updated Aug 6, 2024 · Assigned by mitre