high7.0
CVE-2020-35740
HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks.
Impact
HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgiga | Msr45 Isherlock-Antispam | before 4.5-133 |
| Hgiga | Msr45 Isherlock-User | before 4.5-120 |
| Hgiga | Ssr45 Isherlock-Antispam | before 4.5-133 |
| Hgiga | Ssr45 Isherlock-User | before 4.5-120 |