Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-43238

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows DOM-Based XSS.This issue affects weMail: from n/a through <= 1.14.5.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.4%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2024-43238
  • Wedevs » Wemail » Version: N/A
    cpe:2.3:a:wedevs:wemail:-
  • Wedevs » Wemail » Version: 1.14.2
    cpe:2.3:a:wedevs:wemail:1.14.2
  • Wedevs » Wemail » Version: 1.14.3
    cpe:2.3:a:wedevs:wemail:1.14.3


Contact Us

Shodan ® - All rights reserved