CVE-2023-4393: Liquidfiles

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.

Affected products

• Liquidfiles Liquidfiles: before 3.7.14 (fixed in 3.7.14)

Published 2023-10-30. Last modified 2026-06-17.