What’s Vulnerable › Vulnerabilities

CVE-2022-31200

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-07-27 · updated 2026-06-17
• Weakness: CWE-79

Description

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field.

Affected products

• Atmail Webmail Server: 5.62

References

• https://medium.com/%40rohitgautam26/cve-2022-31200-5117bac8d548
• https://portswigger.net/blog/exploiting-xss-in-post-requests
• https://medium.com/%40rohitgautam26/cve-2022-31200-5117bac8d548
• https://portswigger.net/blog/exploiting-xss-in-post-requests

Get alerted when CVE-2022-31200 or the next vulnerability affects your stack