medium5.4
CVE-2022-41676
Raiden MAILD Mail Server website mail field has insufficient filtering for user input.
Impact
Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS (Reflected Cross-Site Scripting) attack to the mail recipient.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Raidenmaild | Raidenmaild | before 4.7.4 |