Описание
Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via Javascript to the "check spelling" feature in the compose area.
Ссылки
- Vendor Advisory
- ExploitVendor Advisory
- Vendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:smartertools:smartermail:1.6.1511:*:*:*:*:*:*:*
cpe:2.3:a:smartertools:smartermail:1.6.1529:*:*:*:*:*:*:*
EPSS
Процентиль: 71%
0.00675
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via Javascript to the "check spelling" feature in the compose area.
EPSS
Процентиль: 71%
0.00675
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other