Cross site scripting

IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-37728

IceWarp Webmail Server v10.2.1 is affected by a Cross‑Site Scripting (XSS) vulnerability reachable via the color parameter. The Nuclei template and related references describe an XSS that could allow an unauthenticated attacker to inject JavaScript and potentially access user sessions (cookie lea...