Skip to content
OpenAdvisories
Unscored CVE-2021-20723 EUVD-2021-8137GHSA-cx92-xx5x-453q

Reflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the last updated date listed at the top of descri…

Published May 24, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

Reflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the last updated date listed at the top of descriptions in the program file is from 2014 December 12 to 2018 July 27) allows a remote attacker to inject an arbitrary script via unspecified vectors.

Affected products

VendorProductAffectedFixed
PHP Factory [MailForm01] free edition versions which the last updated date listed at the top of descriptions in the program file is from 2014 December 12 to 2018 July 27 —

References