PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| phpmailer/phpmailer(Packagist) | 0 | 6.1.6 | N/A |
CVSS Metrics
