medium6.1
CVE-2020-22402
Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email contain…
Impact
Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alinto | Sogo Web Mail | before 4.3.1 |