SPEmailHandler-PHP vulnerabilities
1 known vulnerability in SPEmailHandler-PHP from Spencer14420. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest first
- 8.6 High severity
SPEmailHandler-PHP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
sp-php-email-handler is a PHP package for handling contact form submissions. Messages sent using this script are vulnerable to abuse, as the script allows anybody to specify arbitrary email recipients and include user-provided content in confirmation emails. T