Medium · 6.1 CVE-2026-66358 EUVD-2026-62237GHSA-qv73-xfjm-gc7w

A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script.

Published Aug 19, 2026 · Updated Aug 20, 2026 · Assigned by jpcert

Description

Vendor	Product	Affected	Fixed
Extra Innovation	acmailer CGI	< 4.1.2	4.1.2
Extra Innovation	acmailer DB	< 1.2.2	1.2.2