Skip to content
OpenAdvisories
Medium · 6.1 CVE-2023-49780 EUVD-2025-4969GHSA-wfv9-phg2-7v54

Cross-site scripting vulnerability exists in acmailer CGI ver.4.0.5 and earlier. An arbitrary script may be executed on the web browser of …

Published Feb 12, 2025 · Updated Feb 18, 2025 · Assigned by jpcert

Description

Cross-site scripting vulnerability exists in acmailer CGI ver.4.0.5 and earlier. An arbitrary script may be executed on the web browser of the user who accessed the management page of the affected product.

Affected products

VendorProductAffectedFixed
Extra Innovation acmailer CGI ver.4.0.5 and earlier —

References