CVE-2023-4594 — Cross-site Scripting in BVRP Software SLmail

CVE-2023-4594

Cross-site Scripting in BVRP Software SLmail PUBLISHED

Description (CNA)

Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in the MailAdmin_dll.htm file.

Affected (CNA)

Vendor / product	Versions
BVRP Software / SLmail	affected 5.5.0.4433

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-bvrp-software-slmail

ADP enrichment

CVE

No English description supplied.

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-bvrp-software-slmail

CISA-ADP

No English description supplied.

No references supplied.