← Back

Mailtrain

mailtrain

Vendor: Mailtrain • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-24617
1Mailtrain
1Mailtrain
Jun 17, 2026
Feb 19, 2021
N/A· v4
8.8 HIGH· v3
6.0 MEDIUM· v2
Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped.