CVE-2021-40377

—

CVSS 3.1

5.4 medium

EPSS

<1%p39

Published

Sep 8, 2021 (Sep 8, 2021)

Modified

Jun 17, 2026

Description

SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.

Vendors: smartertools
Products: smartermail
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.