Unscored CVE-2015-6942 EUVD-2015-6874GHSA-p83m-76m4-2p26

Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink i…

Published Aug 29, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment.

References

20151127 [CVE-2015-6942] CoreMail XT3.0 Stored XSS mailing-list