Skip to content
Sign in
7.1 High

CVE-2025-23676 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH Email lh-email allows Reflected XSS.This issue affects LH Email: from n/a through <= 1.12.

Affected products and versions

Product Affected versions Fixed in
LH Email 1.12 earliest → 1.12 No fix stated
LH Email 1.12 earliest → 1.12 No fix stated
Track this CVE