Skip to content
OpenAdvisories

Product · Spencer14420

SPEmailHandler-PHP

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2024-53860

    Potential Abuse for Sending Arbitrary Emails in sp-php-email-handler

    sp-php-email-handler is a PHP package for handling contact form submissions. Messages sent using this script are vulnerable to abuse, as the script allows anybody to specify arbitrary email recipients and include user-provided content in confirmation emails. …

    Spencer14420 SPEmailHandler-PHP spencer14420/sp-php-email-handler Packagist