Vulnerabilities (CVE)

Filtered by vendor Magento Subscribe
Filtered by product Advanced Newsletter
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-1634 1 Magento 1 Advanced Newsletter 2023-12-10 10.0 HIGH 9.8 CRITICAL
SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.