Threats tagged 'ghsa-rhv9-26qc-872f'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.2%	CVE-2026-102374GestSup versions before 3.2.62 contain a stored cross-site scripting vulnerability in the IMAP OAuth connector that double-decodes MIME-encoded email subjects after HTML escaping Medium6.1EPSS 0.2%2026-09-29GCVE DatabaseCVE-2026-102374 GestSup versions before 3.2.62 contain a stored cross-site scripting vulnerability in the IMAP OAuth connector that double-decodes MIME-encoded email subjects after HTML escaping. Unauthenticated attackers can send crafted emails to monitored mailboxes with nested MIME encoded-words to inject JavaScript that executes in technician sessions when viewing tickets. EPSS 0.2%Vulnerability CWE-79 #ghsa-rhv9-26qc-872f	GCVE Database	2026-09-29

Page 1 of 1