CVE-2021-40377
Medium
Description
SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.
SeverityMedium
CVSS5.4
Exploit probability—
ProductSmartertools Smartermail
PublishedSep 8, 2021
First seenSep 8, 2021
How to fix
Update
- smartertools smartermail16.3.7866 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smartertools smartermail | 16.0.6345 ≤ v < 16.3.7866 | 16.3.7866 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.