Skip to content
OpenAdvisories
Unscored CVE-2021-40377 EUVD-2021-27554GHSA-wrqj-gjcp-v24r

SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to injec…

Published Sep 8, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.

References