critical9.6Public exploit code
CVE-2023-48974
Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Axigen < 10.5.7 - Persistent Cross-Site Scripting2024-04-02 · webapps · php
Impact
Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axigen | Axigen Mail Server | through 10.5.7 |