CVE-2020-11734

cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter...

CVE-2020-11734

CVE-2020-11734 affects CyberSolutions CyberMail 5+ where the CGI script cgi-bin/go is vulnerable to XSS via the ACTION parameter due to insufficient input validation. The vulnerability enables injection of client-side script in the victim’s browser when interacting with CyberMail. Multiple source...