Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-120471 EUVD-2026-124607GHSA-gj32-cq8m-fpm8

Joomla Extension - acymailing.com - Site modules rendered outside their access level in AcyMailing 1.0.0 - 11.1.1

Published Nov 12, 2026 · Updated Nov 13, 2026 · Assigned by Joomla

Description

Joomla Extension - acymailing.com - Site modules rendered outside their access level in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated visitor can cause a site module to be rendered regardless of the Joomla access level that module is restricted to, which discloses content reserved for a higher view level. The WordPress plugin is not affected.

Affected products

VendorProductAffectedFixed
Datasolution AcyMailing extension for Joomla 1.0.0-11.1.1 —

References