CVE-2023-4594: Seattlelab Slmail

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in the MailAdmin_dll.htm file.

Affected products

• Seattlelab Slmail: version 5.5.0.4433 only

Published 2023-11-23. Last modified 2026-06-17.