A vulnerability was identified in doramart DoraCMS 3.0.x affecting the Email API component. The issue involves improper authentication in the /api/v1/mail/send endpoint that can be exploited remotely. A public exploit is available for this vulnerability. The vendor was contacted about the disclosure but did not respond. This represents an authentication bypass vulnerability that could allow unauthorized access to email functionality.