CVE-2022-22146

Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

Score

CVSS 3.1 6.1 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2022-02-08

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Transmitmail (Dounokouno)
• Transmitmail (Tagawa Takao)

References

• https://dounokouno.com/2022/01/25/about-the-vulnerability-of-transmitmail-v2-5-0-v2-6-1/
• https://jvn.jp/en/jp/JVN70100915/index.html