Description
Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1 - On a default configuration, an attacker can craft a link on the affected site that redirects the visitor to an arbitrary external site, which is usable for phishing under the trusted domain.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Datasolution | AcyMailing extension for Joomla and WordPress | 1.0.0-11.1.1 | — |
References
- https://www.acymailing.com/ product