Description
HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HGiga | MailSherlock | iSherlock-user-4.5 – ≤ iSherlock-user-4.5-161, iSherlock-antispam-4.5 – ≤ iSherlock-antispam-4.5-167 | — |