Known vulnerabilities in PHPMailer 5.2.23
Vendor:
phpmailer.sourceforge.net
Software:
PHPMailer
Version:
5.2.23
Software CPE:
cpe:2.3:a:phpmailer_sourceforge_net:phpmailer:*:*:*:*:*:*:*:*
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
7.1.1
7.1.0
7.0.2
7.0.1
7.0.0
6.12.0
6.11.1
6.11.0
6.10.0
6.9.3
6.9.2
6.9.1
6.9.0
6.8.1
6.8.0
6.7.1
6.7
6.6.5
6.6.4
6.6.3
6.6.2
6.6.1
6.6.0
6.5.4
6.5.3
6.5.2
6.5.1
6.5.0
6.4.1
6.4.0
6.3.0
6.2.0
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.7
5.2.28
5.2.0
5.1.0
5.0.2
5.0.0
2.3.0
2.2.1
2.0.3
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.2.27
5.2.26
5.2.25
5.2.24
5.2.23
5.2.22
5.2.21
5.2.20
5.2.19
5.2.18
5.2.17
5.2.16
5.2.15
5.2.14
5.2.13
5.2.12
5.2.11
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.2.5
5.2.4
5.2.3
5.2.2
5.2.1
5.2
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU54171 - Improper Control of Generation of Code ('Code Injection') CVE-2021-3603 |
CWE-94 | High | 6.5.0 | 16.06.2021 |
SB2021061620 SB2021070506 SB2022032104 and 4 more |
||
| #VU54170 - Improper input validation CVE-2021-34551 |
CWE-20 | Medium | 6.5.0 | 16.06.2021 |
SB2021061620 SB2021070506 SB2022032104 and 2 more |
||
| #VU16334 - Improper input validation CVE-2018-19296 |
CWE-20 | High | 5.2.27, 6.0.6 | 07.12.2018 |
SB2018120727 SB2018120728 SB2019061106 and 12 more |
||
| #VU7653 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-11503 |
CWE-79 | Low | - | 02.08.2017 |
SB2017062503 SB2023031539 SB2023031540 and 5 more |