CVE-2019-13392

A reflected Cross-Site Scripting (XSS) vulnerability in MindPalette NateMail 3.0.15 allows an attacker to execute remote JavaScript in a victim's browser via a…

published October 15, 2019

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

A reflected Cross-Site Scripting (XSS) vulnerability in MindPalette NateMail 3.0.15 allows an attacker to execute remote JavaScript in a victim's browser via a specially crafted POST request. The application will reflect the recipient value if it is not in the NateMail recipient array. Note that this array is keyed via integers by default, so any string input will be invalid.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04019 · 90.5th percentile
Published
2019-10-15T23:52Z
EPSS history
Timeline
  • 15 OCT 23:52Z
    A reflected Cross-Site Scripting (XSS) vulnerability in MindPalette NateMail 3.0.15 allows an attacker to execute remote JavaScript in a victim's browser via a…
    cvelistv5