VULNERABILITY INTELLIGENCE

CVE-2020-35741

CVSS score7 HIGH

EPSS probability0.62%

CISA KEVNot currently listed

Published2020-12-31

Last modified2026-06-17

Description

HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inject JavaScript syntax for XSS attacks.