Lucene search
GoogleOSV:GHSA-QV7G-J98V-8PP7HistoryJan 06, 2022 - 6:34 p.m.
XSS vulnerability on email template preview page
2022-01-0618:34:35
Google
osv.dev
15
xss
email template
preview
permission
payload
execution
vulnerability
software
EPSS
0.001
Percentile
19.5%
Summary
Email template preview is vulnerable to XSS payload added to email template content. The attacker should have permission to create or edit an email template. For successful payload, execution attacked user should preview a vulnerable email template.
Workarounds
There are no workarounds that address this vulnerability.
Related
prion
prion
Cross site scripting
2022-01-04 19:15:00
cve
cve
CVE-2021-41236
2022-01-04 19:15:14
veracode
veracode
Cross-site Scripting (XSS)
2022-01-05 07:11:39
cvelist
cvelist
CVE-2021-41236 XSS vulnerability in oro/platform
2022-01-04 19:00:12
osv
osv
CVE-2021-41236
2022-01-04 19:15:14
nvd
nvd
CVE-2021-41236
2022-01-04 19:15:14
github
github
XSS vulnerability on email template preview page
2022-01-06 18:34:35