CMS Made Simple Forums

Potentially a very dumb question. My host just emailed:

Code injection vulnerability in PHPMailer
/home/HOMEDIR/public_html/lib/phpmailer/class.phpmailer.php

Is this code supplied with CMSMS? The host says they will "upgrade it for me" in 7 days if I don't do anything.

Thank you for CMSMS! Been using it on two sites for many years now.

I assume you use latest core version?

That file is iirc third party software included in CMSMS core.

Grtz. Rolf

Greetings Rolf. Yes, I am using 2.2.15. So when my host says they are going to upgrade it, I assume they meant they will upgrade just the phpmailer package. But that is scary if they upgrade it without regard for how it interacts with the rest of the CMSMS system...