Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-4393 EUVD-2023-54257GHSA-67p3-vgwg-jfjf

HTML and SMTP Injection in LiquidFiles

Published Oct 29, 2023 · Updated Sep 25, 2024 · Assigned by TML

Description

HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.

Affected products

VendorProductAffectedFixed
LiquidFiles Pty LiquidFiles ≤ 3.7.13 —

References