CVE-2022-41676

MEDIUM Year: 2022
CVSS v3 Score
5.4
Medium
Weakness Type
CWE-85
View all →

Vulnerability Description

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS (Reflected Cross-Site Scripting) attack to the mail recipient.

Related Vulnerabilities

CVE-2024-13721

MEDIUM
CVSS:6.4(Medium)

The Plethora Plugins Tabs + Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the anchor parameter in all versions up to, and including, 1.1.8 due to insufficient input ...

CWE-852024

CVE-2024-13721

MEDIUM
CVSS:6.4(Medium)

The Plethora Plugins Tabs + Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the anchor parameter in all versions up to, and including, 1.1.8 due to insufficient input ...

CWE-852024