CVE-2022-31200

Description

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field.

Affected Platforms

Weakness Type

CWE-79

References

• https://medium.com/%40rohitgautam26/cve-2022-31200-5117bac8d548
• https://portswigger.net/blog/exploiting-xss-in-post-requests
• https://medium.com/%40rohitgautam26/cve-2022-31200-5117bac8d548
• https://portswigger.net/blog/exploiting-xss-in-post-requests