Vulnerability identifier: #VU43506

Vulnerability risk: Low

CVSSv3.1: 5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:U/RC:C]

CVE-ID: CVE-2012-2575

CWE-ID: CWE-79

Exploitation vector: Network

Exploits in database: 1

• August 11, 2020
  • Surgemail 6.0a4 - Persistent Cross-Site Scripting [Exploit-DB]

Impact: Data manipulation

Vulnerable software:
SurgeMail
Other software / Other software solutions

Vendor: NetWin