CVE-2017-14597

https://notcve.org/view.php?id=CVE-2017-14597

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain. Existe una vulnerabilidad de Cross-Site Scripting (XSS) en AdminPanel en AfterLogic WebMail 7.7 y Aurora 7.7.5 mediante el campo txtDomainName a adminpanel/modules/pro/inc/ajax.php al añadir un dominio. • https://auroramail.wordpress.com/2017/08/28/vulnerability-in-webmailaurora-closed • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •