Security Advisory

CVE-2020-35741

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-12-31 07:45:50
Last updated 2024-09-16 22:55:57
Assigner twcert
CVSS score 7.0
State PUBLISHED

Description

HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inject JavaScript syntax for XSS attacks.