Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-4594

Cross-site Scripting in BVRP Software SLmail

Description

Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in the MailAdmin_dll.htm file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BVRP Software SLmail

Default version status: unaffected

  • 5.5.0.4433affected

References