Medium severity6.1NVD Advisory· Published Aug 17, 2023· Updated Jun 17, 2026

CVE-2023-39971

Description

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Acymailing/AcyMailing
cpe:2.3:a:acymailing:acymailing:*:*:*:*:enterprise:joomla\!:*:*
Range: >=6.7.0,<8.7.0
Acymailing/AcyMailing Enterprisellm-create
Range: 6.7.0-8.6.3
Joomla/AcyMailing Enterprisellm-fuzzy
Range: 6.7.0-8.6.3
Acymailing.com/Acymailing Component For Joomlacpe-rescue
Range: 6.7.0-8.6.3

Patches

Vulnerability mechanics

References

www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/nvdRelease NotesVendor Advisory
extensions.joomla.org/extension/acymailing-starter/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000