CVE-2012-2587

2012-08-1221:00:00

certcc

www.cve.org

cross-site scripting

afterlogic mailsuite pro

remote attackers

e-mail message

iframe element

script element

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

51.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted SRC attribute of (1) an IFRAME element or (2) a SCRIPT element.

References

www.exploit-db.com/exploits/20352/