VYPR

Coremail Xt

by Coremail Xt Project

CVEs (1)

  • CVE-2020-29133MedNov 27, 2020
    risk 0.40cvss 6.1epss 0.01

    jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter.