VulnCheck KEV: CVE-2020-27982

IceWarp 11.4.5.0 allows XSS via the language parameter...

CVE-2020-27982

CVE-2020-27982 affects IceWarp WebMail 11.4.5.0 and is an XSS vulnerability exploitable via the language parameter (e.g., /webmail/?language=). The root cause is improper handling of the language parameter, enabling arbitrary JavaScript execution in a victim’s browser (session hijacking/defacemen...

CVE-2020-27982

IceWarp 11.4.5.0 allows XSS via the language parameter...

CVE-2020-27982

IceWarp 11.4.5.0 allows XSS via the language parameter...

Cross site scripting

IceWarp 11.4.5.0 allows XSS via the language parameter...

PT-2020-16888 · Icewarp · Icewarp

Name of the Vulnerable Software and Affected Versions: IceWarp version 11.4.5.0 Description: The issue allows for a Cross-Site Scripting XSS attack via the language parameter. This can potentially lead to malicious script execution on the client-side. The estimated number of affected devices and...