IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0.

Published Oct 11, 2019 · Updated Aug 7, 2024 · Assigned by mitre