Acymailing Newsletter Via Smtp, Sendinblue, Sendgrid, Mailgun Acymailing SMTP Newsletter vulnerabilities

1 vulnerability

Known vulnerabilities in Acymailing Newsletter Via Smtp, Sendinblue, Sendgrid, Mailgun Acymailing SMTP Newsletter, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-24288acymailingacymailing+2
EPSS score
1.94%
When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.