cleantalk
Vulnerabilities and Security Researches

SMTP for Amazon SES – YaySMTP, CVE-2025-54043

CVE, Research URL

CVE-2025-54043

Published on
Jul 16, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce SMTP for Amazon SES allows SQL Injection. This issue affects SMTP for Amazon SES: from n/a through 1.9.
Affected versions
Min -, max 1.9.1.
Status
vulnerable