CVE-2017-11503
libphp-phpmailer: PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.
CVE-2017-11503 is fixed in libphp-phpmailer on 1 platform by libphp-phpmailer 5.2.14+dfsg-2.3+deb9u2ubuntu0.1~esm2 (version 5.2.14+dfsg-2.3+deb9u2ubuntu0.1~esm2), released July 20, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0240
84th percentile
PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libphp-phpmailer · Ubuntu 18.04.6 LTS (bionic) | 5.2.14+dfsg-2.3+deb9u2ubuntu0.1~esm2 | libphp-phpmailer 5.2.14+dfsg-2.3+deb9u2ubuntu0.1~esm2 | Jul 20, 2017 |