CVE-2021-40377

Publication date

2021-09-08 10:57:35

Family

mitre

State

PUBLISHED

Description

SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.