Acmailer Cgi
Monthly
Cross-site scripting in acmailer CGI and acmailer DB (Extra Innovation Inc.) allows remote unauthenticated attackers to inject and execute arbitrary JavaScript in victim browsers when users interact with attacker-crafted content. Both distribution variants - the CGI-based and the database-backed editions - are confirmed affected per CPE data and JPCERT coordination (JVN#47716829). No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Cross-site scripting in acmailer CGI and acmailer DB (Extra Innovation Inc.) allows remote unauthenticated attackers to inject and execute arbitrary JavaScript in victim browsers when users interact with attacker-crafted content. Both distribution variants - the CGI-based and the database-backed editions - are confirmed affected per CPE data and JPCERT coordination (JVN#47716829). No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.