CVE-2020-25925

CVE-2020-25925

EPSS 1.0%

Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://ashketchum.medium.com/cross-site-scripting-xss-in-webmail-calender-in-icewarp-webclient-cve-2020-25925-67e1cbc40bd9