CVE-2019-7211

SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-04-24

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Smartermail (Smartertools)

References

• https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/
• https://www.smartertools.com/smartermail/release-notes/current