| Package | Affected versions | Patched versions |
|---|---|---|
| one click orgs | = 1.0.0= 1.0.1= 1.1.0= 1.1.1= 1.2.0= 1.2.1≤ 1.2.2 |
One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characters in an org name or (2) " (double quote) characters in an e-mail address, related to a "2nd Order SMTP Injection" issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free