Vendor
An unauthenticated stored XSS vulnerability in GoSMTP Pro (<= 1.2.3) allows attackers to inject arbitrary web scripts via email log body content.