CVE-2020-22402

—

CVSS 3.1

6.1 medium

EPSS

<1%p31

Published

Jun 14, 2023 (Jun 14, 2023)

Modified

Jun 17, 2026

Description

Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code.

Vendors: alinto
Products: sogo web mail
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.