Mailtrain-org/mailtrain

Releases36

Frequency1 month 3 weeks

Last Release almost 5 years ago

Stars5.73K

Self hosted newsletter app

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-24617 ↗	Feb 19, 2021Friday, 19 February 2021, 23:15	8.8 HIGH	6 MEDIUM
Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped.