Medium severity6.1NVD Advisory· Published Feb 9, 2024· Updated Jun 17, 2026
CVE-2023-39683
CVE-2023-39683
Description
Cross Site Scripting (XSS) vulnerability in EasyEmail v.4.12.2 and before allows a local attacker to execute arbitrary code via the user input parameter(s). NOTE: Researcher claims issue is present in all versions prior and later than tested version.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:zalify:easy_email:*:*:*:*:*:node.js:*:*+ 1 more
- cpe:2.3:a:zalify:easy_email:*:*:*:*:*:node.js:*:*range: <=4.12.2
- (no CPE)range: <=4.12.2
- EasyEmail/EasyEmaildescription
Patches
Vulnerability mechanics
References
3- medium.com/%40vificatem/cve-2023-39683-dom-xss-on-json-source-code-panel-in-zalify-easy-email-3fa08f3e0d49nvdExploitThird Party Advisory
- github.com/zalify/easy-email/issues/321nvdIssue Tracking
- github.com/zalify/easy-email/issues/373nvdIssue Tracking
News mentions
0No linked articles in our index yet.