high7.0
CVE-2020-35741
HGiga MailSherlock does not validate user parameters on multiple login pages.
Impact
HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inject JavaScript syntax for XSS attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgiga | Msr45 Isherlock-Antispam | before 4.5-133 |
| Hgiga | Msr45 Isherlock-User | before 4.5-120 |
| Hgiga | Ssr45 Isherlock-Antispam | before 4.5-133 |
| Hgiga | Ssr45 Isherlock-User | before 4.5-120 |