3 matches found
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview.
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component.
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.