← Back

Smseagle

smseagle

Vendor: Smseagle • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-59715
1Smseagle
1Smseagle
Jun 17, 2026
Sep 19, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.
CVE-2024-37392
1Smseagle
1Smseagle
Jun 17, 2026
Aug 23, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A stored Cross-Site Scripting (XSS) vulnerability has been identified in SMSEagle software version < 6.0. The vulnerability arises because the application did not properly sanitize user input in the SMS messages in the i...Show more
A stored Cross-Site Scripting (XSS) vulnerability has been identified in SMSEagle software version < 6.0. The vulnerability arises because the application did not properly sanitize user input in the SMS messages in the inbox. This could allow an attacker to inject malicious JavaScript code into an SMS message, which gets executed when the SMS is viewed and specially interacted in web-GUI.Show less