CVE-2023-4393CWE-116CWE-147

HTML and SMTP Injection in LiquidFiles

Medium · published October 29, 2023

CVSS v3.1
5.4
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weaknesses
CWE-116 · Improper Encoding or Escaping of Output; CWE-147 · Improper Neutralization of Input Terminators
Published
2023-10-29T23:13Z
EPSS history
Timeline
  • 29 OCT 23:13Z
    HTML and SMTP Injection in LiquidFiles
    cvelistv5