spencer14420/sp-php-email-handler

Packagist1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting spencer14420/sp-php-email-handlerpage 1 of 1

CVE-2024-53860HIGHCVSS 8.6EG 8.6✓ Fixed in 1.0.0
2024-11-27
vulnerable: 1.0.0-alpha ... 1.0.0-beta2 (6 versions)
sp-php-email-handler is a PHP package for handling contact form submissions. Messages sent using this script are vulnerable to abuse, as the script allows anybody to specify arbitrary email recipients and include user-provided content in c…

Check whether spencer14420/sp-php-email-handler is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for spencer14420/sp-php-email-handler CVEs against the assets you own.

Start Free Scan →