Medium severity6.1NVD Advisory· Published May 17, 2021· Updated Jun 17, 2026

CVE-2021-24288

Description

When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Acymailingllm-fuzzy
Package: https://wordpress.org/plugins/acymailing
AcyMailing/Newsletter via SMTP, Sendinblue, Sendgrid, Mailgun - AcyMailing SMTP Newsletterv5
Range: 7.5.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/56628862-1687-4862-9ed4-145d8dfbca97nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000