CVE-2024-2596 Cross-Site Scripting (XSS) in AMSS++

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/modules/mail/main/selectsend.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially...

CVE-2024-2596

AMSS++ 4.31 is affected by a Cross-Site Scripting (XSS) vulnerability in multiple parameters of the /amssplus/modules/mail/main/select_send.php endpoint due to insufficient encoding of user-supplied input. This could allow a remote attacker to supply a crafted URL to an authenticated user and ste...