2 matches found
CVE-2019-19265: Improper Neutralization of Input During Web Page Generation
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 1 of 2 in notes for contacts...
6.1CVSS6.4AI score0.01011EPSS
SaveExploits2References2
PT-2020-10116
Name of the Vulnerable Software and Affected Versions IceWarp WebMail Server versions prior to 12.2.1.1 Description The issue allows for XSS in notes for contacts. Recommendations For versions prior to 12.2.1.1, update to version 12.2.1.1 or later to resolve the issue...
6.1CVSS0.01011EPSS
SaveExploits2References4
20