CVE-2024-53860: SPEmailHandler-PHP has Potential Abuse for Sending Arbitrary Emails

Messages sent using this script are vulnerable to abuse, as the script allows anybody to specify arbitrary email recipients and include user-provided content in confirmation emails. This could enable malicious actors to use your server to send spam, phishing emails, or other malicious content, potentially damaging your domain’s reputation and leading to email providers disallowing your domains.