CVEvulnerability
CVE-2023-49780
6.1 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2025-02-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting vulnerability exists in acmailer CGI ver.4.0.5 and earlier. An arbitrary script may be executed on the web browser of the user who accessed the management page of the affected product.
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://acmailer.jp/info/de.cgi?id=113 acmailer.jp
- https://jvn.jp/en/jp/JVN84319378/ jvn.jp