Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-41676 EUVD-2022-44862GHSA-q7pj-pvmx-gpfg

TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting

Published Nov 29, 2022 · Updated Apr 24, 2025 · Assigned by twcert

Description

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS (Reflected Cross-Site Scripting) attack to the mail recipient.

Affected products

VendorProductAffectedFixed
TEAM JOHNLONG SOFTWARE MAILD Mail Server 4.7 —

References