Vulnerability Details CVE-2023-24839
HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.9%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2023-24839
-
cpe:2.3:a:hgiga:oaklouds_mailsherlock:4.5