CVE-2023-28733 (published 2023-03-30T11:27:40.884Z)
AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. 

This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0. 









Affected products: Vendor: AcyMailing
Product: Newsletter Plugin for Joomla in the Enterprise version 
Versions: 0