Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39756
HistoryMar 13, 2023 - 1:32 a.m.

Cross-site Scripting (XSS)

2023-03-1301:32:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
cross-site scripting
sogo
mail handler
vulnerability
javascript injection

0.001 Low

EPSS

Percentile

30.4%

sogo is vulnerable to Cross-site Scripting (XSS). The vulnerability exists in the NSString+Utilities.m of Mail Handler, allowing an attacker to inject and execute malicious javascript

0.001 Low

EPSS

Percentile

30.4%