CVE-2022-41676 — TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting

CVE-2022-41676

TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting PUBLISHED

Description (CNA)

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS (Reflected Cross-Site Scripting) attack to the mail recipient.

Affected (CNA)

Vendor / product	Versions
TEAM JOHNLONG SOFTWARE CO., LTD. / MAILD Mail Server	affected 4.7

CWE

CWE-85

References

https://www.twcert.org.tw/tw/cp-132-6743-0a2c4-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6743-0a2c4-1.html

CISA-ADP

No English description supplied.

No references supplied.