CVE-2024-55492

Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...

CVE-2024-55492

creationtimestamp| type| source ---|---|--- 2024-12-18 17:13:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113674945965100212 2024-12-18 18:42:48+00:00| seen| https://t.me/cvedetector/13214...

CVE-2024-55492

Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...

CVE-2024-55492

Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...

CVE-2024-55492

CVE-2024-55492 affects Winmail Server 4.4. The issue is a cross-site scripting (XSS) vulnerability via the f_user parameter containing a payload like %22%3E%3Csvg%20onload. Documented CVSS v3.1 base score 6.1 (Medium) with network attack vector, required user interaction, and changed scope; confi...