GCVE - cpe:2.3:a:zalify:easy_email:*:*:*:*:*:node.js:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zalify:easy_email:*:*:*:*:*:node.js:*:*

part: a version: * update: *

Vendor	Zalify (`dd58ec60-2166-51a4-87e2-8c4e45244c20`)
Product	Easy Email (`fedceea9-ca5f-5cae-9172-a5196fa410d8`)
Edition	*
Language	*
Software edition	*
Target software	node.js
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-39683`	vulnerable	2026-06-08 06:09:37.936857	Details available Cross Site Scripting (XSS) vulnerability in EasyEmail v.4.12.2 and before allows a local attacker to execute arbitrary code via the user input parameter(s). NOTE: Researcher claims issue is present in all versions prior and later than tested version. Published: 2024-02-09T00:00:00.000Z Updated: 2025-05-15T19:40:35.093Z Open on db.gcve.eu Reference links https://github.com/zalify/easy-email/issues/321 https://github.com/zalify/easy-email/issues/373 https://medium.com/%40vificatem/cve-2023-39683-dom-xss-on-json-source-code-panel-in-zalify-easy-email-3fa08f3e0d49	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.