Cross site scripting

2021-01-2622:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed.

CPENameOperatorVersion
winmaileq6.5

CPE	Name	Operator	Version
	winmail	eq	6.5

References

github.com/zhonghaozhao/winmail/issues/2