CVE-2022-22146

2022-02-0811:15:08

Google

osv.dev

transmitmail

cross-site scripting

vulnerability

remote attacker

unauthenticated

arbitrary script

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

46.9%

JSON

Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

References

dounokouno.com/2022/01/25/about-the-vulnerability-of-transmitmail-v2-5-0-v2-6-1/

jvn.jp/en/jp/JVN70100915/index.html