CVE-2017-11503

Packagist/phpmailer/phpmailer CVE-2017-11503: medium 6.1

Cross-site scripting in PHPMailer

Action: Upgrade phpmailer/phpmailer to 5.2.24 or later.

composer require phpmailer/phpmailer:5.2.24

Affected

Fixed versions

Sources

• osv: GHSA-58mj-pw57-4vm2
• https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-58mj-pw57-4vm2
• https://nvd.nist.gov/vuln/detail/CVE-2017-11503
• https://cxsecurity.com/issue/WLB-2017060181
• https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2017-11503.yaml
• https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.24
• https://packetstormsecurity.com/files/143138/phpmailer-xss.txt
• http://www.securityfocus.com/bid/99293
• http://www.securitytracker.com/id/1039026

CVE-2017-11503 · published 2020-03-05T22:09:13Z · modified 2024-02-16T08:24:37.079984Z · JSON