← Database

CVE-2021-40377

MEDIUM CVSS: 5.4 Published: 2021-09-08 Modified: 2026-06-17

Description

SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.

Affected Platforms

Smartertools Smartermail

Weakness Type

CWE-79

References