CVE-2023-48115 (published 2023-12-21T00:00:00)
SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the same request.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a