TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting
CVE-2022-41676
5.4MEDIUM
Key Information:
- Status
- Vendor
- CVE Published:
- 29 November 2022
What is CVE-2022-41676?
Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS (Reflected Cross-Site Scripting) attack to the mail recipient.
Affected Version(s)
MAILD Mail Server 4.7