CVE-2015-2349: Superwebmailer

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in defaultnewsletter.php in SuperWebMailer 5.60.0.01190 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTMLForm parameter.

Affected products

• Superwebmailer Superwebmailer: up to and including 5.60.0.01190

Published 2015-03-19. Last modified 2026-06-17.