CVE-2023-39971

26th percentile - higher than 26% of all known CVEs

CVE-2023-39971 describes an improper neutralization of input during web page generation vulnerability in the AcyMailing Enterprise component for Joomla, allowing for XSS attacks. This issue affects versions 6.7.0-8.6.3 of the component.

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking. This poses a significant security risk to the application and its users' data.

It is recommended to update the AcyMailing Enterprise component to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable to identify other potential threats.