AcyMailing — Vulnerabilities & Security Advisories 4

AcyMailing is a Joomla email marketing extension for creating and managing newsletters. Historically, it has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. The extension has accumulated four CVEs to date, with some allowing attackers to execute arbitrary code or bypass security restrictions. While no major public incidents have been widely documented, the consistent discovery of critical vulnerabilities in this component highlights the importance of regular updates and input validation in email marketing tools. Security researchers have identified multiple injection flaws that could compromise entire Joomla installations if exploited.