CVE-2022-27105

CVE-2022-27105 affects InMailX Outlook Plugin prior to 3.22.0101. The vulnerability stems from unsanitized InMailX Connection names in the Outlook tab, enabling a local user or network administrator to execute HTML/JavaScript in a user’s Outlook via XSS. Remediation: upgrade to version 3.22.0101 ...