Vulnerabilities > CVE-2023-38387 - Unspecified vulnerability in Elasticemail Elastic Email Sender 1.2.5/1.2.6
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Elastic Email Sender plugin <= 1.2.6 versions.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |