CVE-2026-28182

AcyMailing SMTP Newsletter versions up to 10.11.1 are vulnerable to a Subscriber Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk as it can lead to unauthorized actions on behalf of users or data theft. Organizations using affected versions should prioritize remediation to protect their subscribers and maintain the integrity of their email communications.