CVE-2026-48838

20th percentile - higher than 20% of all known CVEs

Versions of Post SMTP <= 3.6.2 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts.

This vulnerability may lead to user data theft or session hijacking, posing a serious threat to the application's security and the organization's data.

It is recommended to update to the latest version of Post SMTP to mitigate this vulnerability and conduct a security audit of the application.