UpHeron
All vulnerabilities

Servers and applications

CVE-2023-48115

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the same request.

Severity
Medium 5.4
Published
21 Dec 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
16.0.8747
Sources
NVD

Affected software

SoftwareAffected versions
SmarterMailServers and applications · cpe:a:smartertools:smartermail
  • From 16.0.8495 before 16.0.8747

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-48115
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-48115