PoC Index

CVE-2020-23517

MEDIUM 6.1EPSS 7.1%

Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm.

CVSS v3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v2.0
4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
7.05% chance of exploitation in the next 30 days, 94th percentile
Nuclei
medium · CWE-79
Published
2021-03-26
Updated
2024-08-04

Proof-of-concept exploits (1)

Nuclei templates (1)

References

Related