CVE-2017-11503

PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-07-20

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Phpmailer (Phpmailer Project)

References

• http://www.securityfocus.com/bid/99293/
• http://www.securitytracker.com/id/1039026
• https://cxsecurity.com/issue/WLB-2017060181
• https://packetstormsecurity.com/files/143138/phpmailer-xss.txt
• https://github.com/PHPMailer/PHPMailer
• https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.24