YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service vulnerabilities

Product

YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service

by yaycommerce · last CVE Feb 19, 2025

CVEs

On KEV

6.1

Max CVSS

New 30D

Vulnerabilities2 In the news0 Timeline

Severity mix

Critical 0High 0Medium 2Low 0

Severity

All severities2 Critical0 High0 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-0916	6.1	0%	Feb 19	YaySMTP 2.4.9 - 2.6.2 - Unauthenticated Stored Cross-Site Scripting Affected: 2.4.9 through 2.6.2
CVE-2023-3093	6.1	0%	Jul 12	YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Email Affected: through 2.4.5