Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-24617
8.8
HIGHCVSS v3
Published
February 19, 2021
CVSS v2
6 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped.
GitHub