CVE-2014-1634

SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.

Date published : 2020-03-09

https://labs.integrity.pt/advisories/cve-2014-1634/