CVE-2023-39683

Published February 9th, 2024

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Cross Site Scripting (XSS) vulnerability in EasyEmail v.4.12.2 and before allows a local attacker to execute arbitrary code via the user input parameter(s). NOTE: Researcher claims issue is present in all versions prior and later than tested version.

zalify/easy-email-editor

Easy Email Editor is a feature-rich, top open-source SaaS email editor based on React and MJML.

GitHub

2.18K