Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.
No PoCs from references.
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/vinnie1717/CVE-2023-48974