CVE-2026-75872
MediumCVSS 6.9Summary
HTML Injection in the public subscription form in maalfer MailerUp before 1.1.3 allows unauthenticated remote attackers to have the application send a message carrying arbitrary HTML, to an attacker-chosen address and from the form owner's configured sending identity, via the first_name field of the subscription request, which is interpolated unescaped into the double opt-in verification email.
Risk Assessment
Attackers can send messages with arbitrary HTML on behalf of the form owner, potentially leading to phishing, malware distribution, or reputational damage.
Recommendation
Upgrade maalfer MailerUp to version 1.1.3 or later, which includes a fix for the HTML injection.
Original NVD description (English source)
HTML Injection in the public subscription form in maalfer MailerUp before 1.1.3 allows unauthenticated remote attackers to have the application send a message carrying arbitrary HTML, to an attacker-chosen address and from the form owner's configured sending identity, via the first_name field of the subscription request, which is interpolated unescaped into the double opt-in verification email.