CVE-2021-40377

2021-09-0810:57:35

mitre

www.cve.org

smartertools

smartermail

xss

email content

html

javascript

application security

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.

References

www.smartertools.com/smartermail/release-notes/current