Acyba Acymailing — known CVE vulnerabilities

Every CVE whose affected-product data names Acyba Acymailing, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-9107 — CVSS 8.8 (high): CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6…
• CVE-2015-7338 — CVSS 7.2 (high): SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.
• CVE-2020-10934 — CVSS 7.2 (high): Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.