CVE-2021-40377

5.4 mediumEPSS 0.5%

Medium (5.4) in smartertools smartermail. EPSS 0.5% chance of exploitation in the next 30 days.

SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-09-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

smartertools:smartermail

References

https://www.smartertools.com/smartermail/release-notes/current
https://www.smartertools.com/smartermail/release-notes/current

Check your stack JSON