Medium severityNVD Advisory· Published Nov 12, 2026· Updated Nov 12, 2026
CVE-2026-120471
CVE-2026-120471
Description
Joomla Extension - acymailing.com - Site modules rendered outside their access level in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated visitor can cause a site module to be rendered regardless of the Joomla access level that module is restricted to, which discloses content reserved for a higher view level. The WordPress plugin is not affected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 1.0.0 - 11.1.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.