CVE-2023-4393 — HTML and SMTP Injection in LiquidFiles

CVE-2023-4393

HTML and SMTP Injection in LiquidFiles PUBLISHED

Description (CNA)

HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.

Affected (CNA)

Vendor / product	Versions
LiquidFiles Pty Ltd / LiquidFiles	affected 0 through 3.7.13

CWE

CWE-116, CWE-147

References

https://www.themissinglink.com.au/security-advisories/cve-2023-4393

ADP enrichment

CVE

No English description supplied.

https://www.themissinglink.com.au/security-advisories/cve-2023-4393

CISA-ADP

No English description supplied.

No references supplied.