Security issues with phpmailer version

Elixir Stacks
1

Hi,

apparently, the Form Pro stack will upload phpmailer version 5.2.15 to the server. I have a security software installed (ImmunifyAV) which claims that this version is subject to the following security problems: CVE-2016-10045, CVE-2016-10031 (possible remote code execution)

Could you consider updating phpmailer in the stack, e.g. to version 5.2.27, the latest of version 5 branch?

Regards
Nicolas

2

I’ll have a look at this for an update.

1 Like