SuperWebMailer Cross-Site Scripting Vulnerability

SuperWebMailer is a WEB-based email application. A cross-site scripting vulnerability exists in SuperWebMailer defaultnewsletter.php, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack use...

CVE-2015-2349: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in defaultnewsletter.php in SuperWebMailer 5.60.0.01190 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTMLForm parameter...