Security Advisory

CVE-2014-1634

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-03-09 16:25:59

Last updated 2024-08-06 09:50:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.

← Browse all CVEs View on cve.org ↗