Lucene search

PRIOn knowledge basePRION:CVE-2023-39683

HistoryFeb 09, 2024 - 7:15 a.m.

Cross site scripting

2024-02-0907:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

easyemail

vulnerability

local attacker

arbitrary code

user input

nvd

researcher

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%

JSON

Cross Site Scripting (XSS) vulnerability in EasyEmail v.4.12.2 and before allows a local attacker to execute arbitrary code via the user input parameter(s). NOTE: Researcher claims issue is present in all versions prior and later than tested version.

CPENameOperatorVersion
easy_emaille4.12.2

CPE	Name	Operator	Version
	easy_email	le	4.12.2

References

github.com/zalify/easy-email/issues/321

github.com/zalify/easy-email/issues/373

medium.com/%40vificatem/cve-2023-39683-dom-xss-on-json-source-code-panel-in-zalify-easy-email-3fa08f3e0d49