cwe-93

SMTP Injection (Email Header Injection): Prevention Guide

A contact form that builds emails from user input can be turned into a spam relay or a phishing generator through SMTP header injection. Here's how the attack works and how to neutralize it.