CVE-2023-24839 (published 2023-03-27T00:00:00)
HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.
Affected products: Vendor: HGiga
Product: MailSherlock
Versions: iSherlock-user-4.5, iSherlock-antispam-4.5