2 matches found
CVE-2026-48539
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...
5.4CVSS5AI score0.00235EPSS
SaveExploits0References3
CVE-2026-48539 GFI Archiver < 15.13 Stored XSS via MailInsights.aspx
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...
5.4CVSS0.00235EPSS
SaveExploits0References2
20