CVE-2023-39683

Cross Site Scripting XSS vulnerability in EasyEmail v.4.12.2 and before allows a local attacker to execute arbitrary code via the user input parameters. NOTE: Researcher claims issue is present in all versions prior and later than tested version...

CVE-2023-39683

EasyEmail XSS (CVE-2023-39683): vulnerable in EasyEmail versions prior to 4.12.2; the JSON Source Code Panel/user input parameter(s) allow a local attacker to execute arbitrary JavaScript in the browser due to insufficient input sanitization. Exploitation details are not fully provided; sources i...