A post-authenticated stored XSS was found in MultiUx v.3.1.12.0 via the /multiux/SaveMailbox LastName field.
- https://www.gruppotim.it/redteam
- https://github.com/404notf0und/CVE-Flow