AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress, CVE-2021-24288
- CVE, Research URL
- Home page URL
- Application
-
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
- Published on
- May 17, 2021
- Research Description
- When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.
- Affected versions
-
max 7.5.0.
- Status
-
vulnerable