CVE-2024-55492

Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...

CVE-2024-55492

creationtimestamp| type| source ---|---|--- 2024-12-18 17:13:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113674945965100212 2024-12-18 18:42:48+00:00| seen| https://t.me/cvedetector/13214...

CVE-2024-55492

Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...

CVE-2024-55492

Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...

CVE-2024-55492

Winmail Server version 4.4 is vulnerable to a Cross-Site Scripting (XSS) vulnerability. The flaw occurs due to the improper neutralization of input during web page generation, specifically involving the f_user variable. An attacker can exploit this by injecting a payload such as %22%3E%3Csvg%20on...