CVE-2022-27105 | BDVDB-2026-181007 Detail

Description#

InMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX Connection names are not sanitzed in the Outlook tab, which allows a local user or network administrator to execute HTML / Javascript in the Outlook of users.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.inmailx.com/products/inmailx
https://gist.github.com/0xVavaldi/9b7afbfe56938294480f7613805d3b7f
https://gist.github.com/TheWorkingDeveloper/9b7afbfe56938294480f7613805d3b7f

Exploit#

No public exploit known

History#

Version 12022-07-26Record published in the CVE List.
Version 22024-11-01Most recent update recorded in the CVE List.