CVE-2020-27509

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post…

published June 26, 2022

CVSS
—
EPSS
1%
Percentile
46.9
In the wild
Unconfirmed
What it is

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs into their mailbox.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00579 · 46.9th percentile
Published
2022-06-26T12:33Z
EPSS history
Timeline
  • 26 JUN 12:33Z
    Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post…
    cvelistv5