CVE-2015-2349

The CVE-2015-2349 entry describes a cross-site scripting (XSS) vulnerability in SuperWebMailer’s defaultnewsletter.php affecting version 5.60.0.01190 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the HTMLForm parameter, enabling script execution in a...

SuperWebMailer 5.50.0.01160 Cross Site Scripting

SuperWebMailer 5.50.0.01160 XSS Cross-site Scripting Security Vulnerabilities Exploit Title: SuperWebMailer /defaultnewsletter.php" HTMLForm Parameter XSS Security Vulnerabilities Product: SuperWebMailer Vendor: SuperWebMailer Vulnerable Versions: 5..0. 4..0. Tested Version: 5..0. 4..0. Advisory...