CVE-2021-25273

Impact

Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://seclists.org/fulldisclosure/2021/Dec/3
• https://community.sophos.com/utm-firewall/b/blog/posts/utm-up2date-9-706-released