CVE-2023-39600

MediumCVSS 6.1

Published: 25/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.17%

63th percentile - higher than 63% of all known CVEs

IceWarp version 11.4.6.0 was found to contain a cross-site scripting (XSS) vulnerability via the color parameter.

Exploitation of this vulnerability could allow for malicious code execution in the user's context, posing a threat to data security and privacy.

It is recommended to update IceWarp software to the latest version to mitigate this vulnerability.

Original NVD description (English source)

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter.