CVE-2018-18621

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto!

published October 24, 2018

CVSS
—
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link (in .txt format) is modified and then renamed with a .html or .wssp extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01058 · 64.2th percentile
Published
2018-10-24T22:00Z
EPSS history
Timeline
  • 24 OCT 22:00Z
    CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto!
    cvelistv5