← All advisories

Medium severity4.3NVD Advisory· Published Aug 17, 2023· Updated Jun 17, 2026

CVE-2023-39972

CVE-2023-39972

Description

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Acymailing/AcyMailing
cpe:2.3:a:acymailing:acymailing:*:*:*:*:enterprise:joomla\!:*:*
Range: >=6.7.0,<8.7.0
Acymailing/AcyMailing Enterprisellm-create
Joomla/AcyMailing Enterprisellm-fuzzy
Acymailing.com/Acymailing Component For Joomlacpe-rescue
Range: 6.7.0-8.6.3

Patches

Vulnerability mechanics

References

2

www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/nvdRelease NotesVendor Advisory
extensions.joomla.org/extension/acymailing-starter/nvdProduct

News mentions

0

No linked articles in our index yet.