Critical severity9.6NVD Advisory· Published Feb 8, 2024· Updated Jun 17, 2026

CVE-2023-48974

Description

Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gecad Technologies/Mail Server
cpe:2.3:a:axigen:axigen_mail_server:*:*:*:*:*:*:*:*
Range: <=10.5.7
Gecad Technologies/WebMailllm-create
Range: <10.3.3.61
Axigen/WebMaildescription

Patches

Vulnerability mechanics

References

www.axigen.com/mail-server/download/nvdProduct
www.axigen.com/updates/axigen-10.3.3.61nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000