Products: 1
Vulnerabilities: 5
Known Exploited: 0
0
Critical Level Threats
0
High Level Threats
4
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-26483
Mettle SendPortal 3.0.1 and earlier contains a stored cross-site scripting (XSS) vulnerability in the template management functionality. The application fails to properly sanitize user-supplied input in the content parameter of the /templates endpoint, allowing an attacker to persistently inject malicious JavaScript code that is executed in the browsers of users who access the affected template.
Last Modified: Aug 01, 2026
Published: Jul 20, 2026
CVE-2026-15192
mettle sendportal APIv1 Webhooks mailjet missing authentication
Last Modified: Jul 09, 2026
Published: Jul 09, 2026
CVE-2026-15191
mettle sendportal Campaign Creation Endpoint CampaignStoreRequest.php authorization
Last Modified: Jul 14, 2026
Published: Jul 09, 2026
CVE-2026-10234
Mettle sendportal Campaign webview cross site scripting
Last Modified: Jun 01, 2026
Published: Jun 01, 2026
CVE-2026-7145
mettle sendportal Invitation WorkspaceInvitationsController.php destroy authorization
Last Modified: Apr 29, 2026
Published: Apr 27, 2026
Items Per Page
