CVE-2020-21142: Ipfire

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi.

Affected products

• Ipfire Ipfire: version 2.23 only

Published 2021-06-28. Last modified 2026-06-17.