CVE-2009-4743: Afterlogic Webmail Pro

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) HistoryStorageObjectName and (2) HistoryKey parameters.

Affected products

• Afterlogic Webmail Pro: up to and including 4.7.10; version 4.5 only

Published 2010-03-26. Last modified 2026-06-16.