Approved changes feed: RSS · Atom

cpe:2.3:a:smseagle:smseagle:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSmseagle (412f317b-827e-5d71-a89a-ede445e28b6a)
ProductSmseagle (68725431-0ed8-5c32-b3a4-12e80a91be92)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59715 vulnerable 2026-06-08 07:35:22.927585 Details available
MEDIUM (4.8)
SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.
Published: 2025-09-19T00:00:00.000Z
Updated: 2025-09-19T13:32:40.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37392 vulnerable 2026-06-08 06:39:47.408883 Details available
A stored Cross-Site Scripting (XSS) vulnerability has been identified in SMSEagle software version < 6.0. The vulnerability arises because the application did not properly sanitize user input in the SMS messages in the inbox. This could allow an attacker to inject malicious JavaScript code into an SMS message, which gets executed when the SMS is viewed and specially interacted in web-GUI.
Published: 2024-08-23T00:00:00.000Z
Updated: 2025-03-20T13:42:50.377Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.