CVE-2023-48115

2023-12-2100:00:00

mitre

www.cve.org

smartertools

smartermail

xss

vulnerability

dom

protection mechanism

messagehtml

messageplaintext .

EPSS

Percentile

14.0%

JSON

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the same request.

References

co3us.gitbook.io/write-ups/stored-dom-xss-in-email-body-of-smartermail

www.smartertools.com/smartermail/release-notes/current

EPSS

Percentile

14.0%

JSON

Related for CVELIST:CVE-2023-48115