Vulnerabilities

Filters

2 selected

8 records

Sort

Vendor: Superwebmailer Component: Superwebmailer Clear all filters

TI-2024-16012 CVE-2024-24131 · GHSA-gfhx-2xqr-982p

SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting…

LOW 29

SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00924 Published 2024-02-07 No fix listed CWE-79

TI-2023-19608 CVE-2023-38194 · GHSA-wwfp-p79h-2x5v

An issue was discovered in SuperWebMailer 9.00.0.01710.

MEDIUM 60

An issue was discovered in SuperWebMailer 9.00.0.01710.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0118 Published 2023-10-21 No fix listed CWE-79

TI-2023-19607 CVE-2023-38193 · GHSA-xv96-5q4x-p79p

An issue was discovered in SuperWebMailer 9.00.0.01710.

HIGH 73

An issue was discovered in SuperWebMailer 9.00.0.01710.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01558 Published 2023-10-21 No fix listed CWE-77

TI-2023-19606 CVE-2023-38192 · GHSA-m276-5338-rwf8

An issue was discovered in SuperWebMailer 9.00.0.01710.

MEDIUM 60

An issue was discovered in SuperWebMailer 9.00.0.01710.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01155 Published 2023-10-21 No fix listed CWE-79

TI-2023-19604 CVE-2023-38190 · GHSA-7jqv-m3g3-hfjh

An issue was discovered in SuperWebMailer 9.00.0.01710.

HIGH 73

An issue was discovered in SuperWebMailer 9.00.0.01710.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00796 Published 2023-10-21 No fix listed CWE-89

TI-2023-19605 CVE-2023-38191 · GHSA-pfwv-624m-h3m9

An issue was discovered in SuperWebMailer 9.00.0.01710.

MEDIUM 60

An issue was discovered in SuperWebMailer 9.00.0.01710.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0056 Published 2023-10-20 No fix listed CWE-79

TI-2020-09264 CVE-2020-11546 · GHSA-rjp2-9xwv-c3mp

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in…

HIGH 67

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.32841 Published 2020-07-14 No fix listed CWE-94

TI-2015-02072 CVE-2015-2349 · GHSA-5jxr-pwqq-jr5q

Cross-site scripting (XSS) vulnerability in defaultnewsletter.php in SuperWebMailer…

LOW 24

Cross-site scripting (XSS) vulnerability in defaultnewsletter.php in SuperWebMailer 5.60.0.01190 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTMLForm parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01927 Published 2015-03-19 No fix listed CWE-79