CVE-2020-35741

HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inject JavaScript syntax for XSS attacks.

Date published : 2020-12-31

https://www.twcert.org.tw/tw/cp-132-4260-ba376-1.html