CVE-2023-39971

Summary

CVE-2023-39971 is a vulnerability affecting the AcyMailing Enterprise component for Joomla versions 6.7.0-8.6.3. An Improper Neutralization of Input During Web Page Generation issue exists, leading to Cross-Site Scripting (XSS) attacks. Attackers can inject malicious scripts into web pages viewed by other users, potentially stealing sensitive information or taking control of their accounts. Users of the affected software are advised to update immediately to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.