CVE-2021-20723: MAILFORM01 Project MAILFORM01

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Reflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the last updated date listed at the top of descriptions in the program file is from 2014 December 12 to 2018 July 27) allows a remote attacker to inject an arbitrary script via unspecified vectors.

Affected products

• MAILFORM01 Project MAILFORM01: from 2014-12-12, up to and including 2018-07-27

Published 2021-05-24. Last modified 2026-06-17.