CVEvulnerability

CVE-2023-40355

5.4 MEDIUM Published 2024-02-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-02-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79

Description

Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute arbitrary code and obtain sensitive information via the logic for switching between the Standard and Ajax versions.

Affected configurations

• axigen axigen mobile webmail (>= 10.3.3.0 < 10.3.3.59) • axigen axigen mobile webmail (>= 10.4.0 < 10.4.19) • axigen axigen mobile webmail (>= 10.5.0 < 10.5.5)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References