Description (CNA)
HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HGiga / MailSherlock | affected iSherlock-user-4.5 through iSherlock-user-4.5-161; affected iSherlock-antispam-4.5 through iSherlock-antispam-4.5-167 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.