SQL Injection exists in AcyMailing Joomla Component prior to 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.
acyba acymailing