CVE-2023-48115

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and…

published December 21, 2023

CVSS
—
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the same request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Published
2023-12-21T00:00Z
EPSS history
Timeline
  • 21 DEC 00:00Z
    SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and…
    cvelistv5