CVE-2024-0246

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25 leads to cross site scripting. It is possible to...

EUVD-2023-41605

IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...