Unscored CVE-2022-22146 EUVD-2022-27293GHSA-qph5-vpwx-7mrr

Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script vi…

Published Feb 8, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: TAGAWA Takao Product: TransmitMail

Description

Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
TAGAWA Takao	TransmitMail	2.5.0 to 2.6.1	—

References

https://dounokouno.com/2022/01/25/about-the-vulnerability-of-transmitmail-v2-5-0-v2-6-1/
https://jvn.jp/en/jp/JVN70100915/index.html