PHPMailer

A critical command injection vulnerability in PHPMailer—a widely used PHP library for sending emails—has recently come under renewed scrutiny following reports of active exploitation. Identified as CVE-2016-10033, this vulnerability poses a significant risk to web applications that rely on PHPMailer for email functionality.