title: Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3
description: Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3.
problem types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
collectionURL: https://extensions.joomla.org/extension/acymailing-starter/
defaultStatus: unaffected
packageName: com_acymailing
product: AcyMailing Enterprise component for Joomla
vendor: acymailing.com
versions:
status: affected, version: 6.7.0-8.6.3
}