VULNERABILITY INTELLIGENCE

CVE-2023-24839

CVSS score6.1 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2023-03-27

Last modified2026-06-17

Description

HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.