CVE-2023-48974

Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.

Score

CVSS 3.1 9.6 Critical

Status

Modified - cve@mitre.org

Published

2024-02-08

Last modified

2025-06-17

Weaknesses

CWE-79

Affected products

• Axigen Mail Server (Axigen)

References

• https://www.axigen.com/mail-server/download/
• https://www.axigen.com/updates/axigen-10.3.3.61