medium6.1
CVE-2023-24839
HGiga MailSherlock’s specific function has insufficient filtering for user input.
Impact
HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgiga | Oaklouds Mailsherlock | Version 4.5 |