Vulnerability Details CVE-2024-43238
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows DOM-Based XSS.This issue affects weMail: from n/a through <= 1.14.5.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.4%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2024-43238
-
cpe:2.3:a:wedevs:wemail:-
-
cpe:2.3:a:wedevs:wemail:1.14.2
-
cpe:2.3:a:wedevs:wemail:1.14.3