CVE-2020-23517
CVE-2020-23517
Vexday Risk Score
18Low
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 7.1%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
26 Mar 2021Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm.
Affected products
n/a · n/a