Vendor/product archive

magento / advanced_newsletter CVEs

Beta · best-effort

1 CVEs tagged to magento / advanced_newsletter — 1 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to magento vendor archive

CVE-2014-1634

Published Mar 9, 2020

SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1