medium5.4
CVE-2021-40377
SmarterTools SmarterMail 16.x before build 7866 has stored XSS.
Impact
SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartertools | Smartermail | from 16.0.6345 before 16.3.7866 |