SMSEagle

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

SMSEagle records in CISA KEV

No SMSEagle vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2024-24897 CVE-2024-37392 · GHSA-27rm-pvpp-228f

LOW 27

A stored Cross-Site Scripting (XSS) vulnerability has been identified in SMSEagle software version < 6.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00254 Published 2024-08-23 No fix listed CWE-79

TI-2025-37175 CVE-2025-59715 · GHSA-cqj4-f3cq-m6pj

LOW 24

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00191 Published 2025-09-19 Fixed in 6.11 CWE-79