Unscored CVE-2020-25925 EUVD-2020-18555GHSA-jx6r-7m2w-776g

Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML v…

Published Jul 7, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field.

References

https://ashketchum.medium.com/cross-site-scripting-xss-in-webmail-calender-in-icewarp-webclient-cve-2020-25925-67e1cbc40bd9