CVE-2021-24288 — AcyMailing < 7.5.0 - Unauthenticated Open Redirect
When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially…
Published: 2021-05-17 · CVSS: Unscored
When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7