PT-2021-19676

CVE-2021-32233

·

Published

2021-07-05

·

Updated

2021-07-13

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: SmarterTools SmarterMail versions prior to Build 7776
Description: The issue allows for cross-site scripting (XSS), which is a type of attack where an attacker injects malicious code into a website, allowing them to steal user data or take control of the user's session.
Recommendations: For versions prior to Build 7776, update to Build 7776 or later to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of XSS exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾