cleantalk
Vulnerabilities and Security Researches

SMTP for SendGrid – YaySMTP, CVE-2025-48301

CVE, Research URL

CVE-2025-48301

Published on
Jul 16, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce SMTP for SendGrid – YaySMTP allows SQL Injection. This issue affects SMTP for SendGrid – YaySMTP: from n/a through 1.5.
Affected versions
Min -, max 1.5.1.
Status
vulnerable