CVE-2006-4956
neosys neon webmail: no CVSS score yet. EPSS 4.8% chance of exploitation in the next 30 days.
Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject arbitrary web script or HTML via the in_name parameter, as used by the Name field.
- EPSS
- 4.8% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- neosys:neon_webmail