Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cf4p-6r33-8p4m

Опубликовано: 27 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

InMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX Connection names are not sanitzed in the Outlook tab, which allows a local user or network administrator to execute HTML / Javascript in the Outlook of users.

InMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX Connection names are not sanitzed in the Outlook tab, which allows a local user or network administrator to execute HTML / Javascript in the Outlook of users.

EPSS

Процентиль: 64%
0.00474
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 3 лет назад

InMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX Connection names are not sanitzed in the Outlook tab, which allows a local user or network administrator to execute HTML / Javascript in the Outlook of users.

EPSS

Процентиль: 64%
0.00474
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79