Cross-Site Scripting Vulnerabilities in Proxmox Mail Gateway by Proxmox
CVE-2014-2325
Currently unrated
What is CVE-2014-2325?
Proxmox Mail Gateway prior to version 3.1-5829 is susceptible to multiple cross-site scripting vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML code through the 'state' parameter in the objects/who/index.htm page or via a user email address in the quarantine/spam/manage.htm page. This can lead to unauthorized data exposure and potential attacks on users interacting with the affected web interface.