CVE-2022-41676: Raidenmaild

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS (Reflected Cross-Site Scripting) attack to the mail recipient.

Affected products

• Raidenmaild Raidenmaild: before 4.7.4 (fixed in 4.7.4)

Published 2022-11-29. Last modified 2026-06-17.