Medium · 5.4 CVE-2024-42912 EUVD-2024-54794GHSA-3r73-v5gv-2jmq

A cross-site scripting (XSS) vulnerability in META-INF Kft. Email This Issue (Data Center) before 9.13.0-GA allows attackers to execute arb…

Published Jul 16, 2025 · Updated Jul 16, 2025 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in META-INF Kft. Email This Issue (Data Center) before 9.13.0-GA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the recipient field of an e-mail message.

References

https://tracker.bugcrowd.com/metainfkft/submissions/51e58658-220e-4614-b605-c8d662b5c426
https://docs.meta-inf.hu/email-this-issue/email-this-issue-for-jira-server-data-center/misc/security-advisories/email-this-issue-security-advisory-2025-06-30