PT-2026-145901

CVE-2026-120469

·

Published

2026-11-12

·

Updated

2026-11-12

Description by

CVSS 4.0
5.1
Medium
MetricsAV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1 - On a default configuration, an attacker can craft a link on the affected site that redirects the visitor to an arbitrary external site, which is usable for phishing under the trusted domain.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')
Related identifiers
CVE-2026-120469
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com