Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Shahab Shamsi

#43727de 53,638
6.1CVSS total
Vulnerabilidades · 1
PT-2017-12058
6.1
2017-07-20
Php · Phpmailer · CVE-2017-11503
**Name of the Vulnerable Software and Affected Versions** PHPMailer version 5.2.23 **Description** The issue concerns a problem with the "From Email Address" and "To Email Address" fields in the code generator.php file, where there is XSS. **Recommendations** For PHPMailer version 5.2.23, consider validating and sanitizing user input in the "From Email Address" and "To Email Address" fields to prevent XSS attacks. As a temporary workaround, restrict access to the code generator.php file until a fix is available.