CVE-2026-66606

SmartSMTP versions up to 1.2.0 are vulnerable to unauthenticated Cross Site Scripting (XSS), allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a significant risk as it can lead to session hijacking, data theft, or defacement of web applications. Organizations using affected versions should prioritize remediation to mitigate potential exploitation.