NuytsTech Security

CVE-2020-13625

by ·

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.

Date published : 2020-06-08

https://github.com/PHPMailer/PHPMailer/releases/tag/v6.1.6

https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-f7hx-fqxw-rvvj

Tags: