Cross-Site Scripting Vulnerability in Acmailer by ACME Corp
CVE-2023-49780

6.1MEDIUM

Key Information:

Vendor: Extra Innovation Inc.
Status: Acmailer Cgi
Vendor: CVE Published:; 12 February 2025

🔔 Create Extra Innovation Inc. Vulnerability Alert

What is CVE-2023-49780?

A Cross-Site Scripting (XSS) vulnerability in Acmailer CGI versions up to and including 4.0.5 allows an attacker to execute arbitrary scripts within the web browsers of users accessing the management page. This poses significant risks, as it may lead to unauthorized access and data manipulation.

Affected Version(s)

acmailer CGI ver.4.0.5 and earlier

References

https://acmailer.jp/info/de.cgi?id=113

https://jvn.jp/en/jp/JVN84319378/

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

CVSS V3.0