Threats tagged 'ghsa-r3wx-qjqf-657f'

A vulnerability in the AcyMailing extension for Joomla and WordPress (versions 1.0.0 through 11.1.1) allows an authenticated user of any privilege level to subscribe or unsubscribe any other subscriber to or from any mailing list on the site. This occurs because the subscriber identity is not properly bound to the record being acted upon.