ARTEC EMA Mail v692, Cross-Site Scripting (XSS), CVE-2025-46611 (Medium)

By /

Listen to this Post

How the CVE Works

CVE-2025-46611 is a stored Cross-Site Scripting (XSS) vulnerability in ARTEC EMA Mail v6.92. The application fails to properly sanitize user-supplied input in email content or attachments, allowing an attacker to inject malicious JavaScript. When a victim views the crafted email, the script executes in their browser, enabling session hijacking, phishing, or further exploitation. The attack requires no authentication, making it dangerous if combined with social engineering.

DailyCVE Form

Platform: ARTEC EMA Mail
Version: v6.92
Vulnerability: Stored XSS
Severity: Medium
Date: 2025-07-02

Prediction: Patch expected by 2025-09-30

What Undercode Say

Analytics:

nmap -p 80,443 --script http-xss <target_IP>
curl -X POST -d "payload=<script>alert(1)</script>" http://target/email

How Exploit:

  • Craft malicious email with embedded `
    Scroll to Top