CVE-2018-18621

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

Design/Logic Flaw

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

CVE-2018-18621

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

CVE-2018-18621

CVE-2018-18621 affects CommuniGate Pro 6.2 via a stored XSS in Pronto! Mail Composer. The vulnerability occurs when the raw email link (in .txt format) is modified and renamed with a .html or .wssp extension, and the malformed message body is mishandled by /MIME/INBOX-MM-1/. Documented impact is ...

CVE-2018-18621: Improper Neutralization of Input During Web Page Generation

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...