← Database

CVE-2026-120471

N/A CVSS: N/A Published: 2026-11-12 Modified: 2026-11-12

Description

Joomla Extension - acymailing.com - Site modules rendered outside their access level in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated visitor can cause a site module to be rendered regardless of the Joomla access level that module is restricted to, which discloses content reserved for a higher view level. The WordPress plugin is not affected.

Affected Platforms

Unknown

Weakness Type

CWE-862

References