Hey C F, It's John, from the support of AcyMailing.
👉 We let you know that we fixed a security issue that allowed malicious file creation on versions prior to v8.5.0.
👉 The AcyMailing team has successfully patched an XSS vulnerability that doesn't require an account, ensuring the safety of our users.
You need to update your AcyMailing to the lastest version 8.6.3 to have the best security change & to protect your data.