CVE-2024-24131: Superwebmailer

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php.

Affected products

• Superwebmailer Superwebmailer: version 9.31.0.01799 only

Published 2024-02-07. Last modified 2026-06-17.