Vulnerabilities > Photoboxone
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-13 | CVE-2024-25914 | Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone Smtp Mail 1.2.16 Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone SMTP Mail.This issue affects SMTP Mail: from n/a through 1.3.20. | 8.8 |
| 2023-07-12 | CVE-2023-3092 | Unspecified vulnerability in Photoboxone Smtp Mail 1.2.16 The SMTP Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.2.16 due to insufficient input sanitization and output escaping when the 'Save Data SendMail' feature is enabled. | 6.1 |