Описание
SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.
Ссылки
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 16.0.6345 (включая) до 16.3.7866 (исключая)
cpe:2.3:a:smartertools:smartermail:*:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00302
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.
EPSS
Процентиль: 53%
0.00302
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79