CVE-2023-38347

MediumCVSS 6.1

Published: 09/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

30th percentile - higher than 30% of all known CVEs

Summary

An issue was discovered in LWsystems Benno MailArchiv version 2.10.1 that allows attackers to exploit an XSS vulnerability via JavaScript content in a mailbox.

Risk Assessment

Attackers can exploit this vulnerability to inject malicious code, potentially leading to user data theft or account takeover.

Recommendation

It is recommended to update to the latest version of the software and implement filters to protect against JavaScript injection.

Original NVD description (English source)

An issue was discovered in LWsystems Benno MailArchiv 2.10.1. Attackers can cause XSS via JavaScript content to a mailbox.