CVE-2018-9330

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-04-07

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Coremail Xt (Coremail)

References

• https://www.youtube.com/watch?v=LRK3c_DhXn4