CVE-2020-27982

IceWarp 11.4.5.0 allows XSS via the language parameter.

• CWE-79

• http://packetstormsecurity.com/files/159763/Icewarp-WebMail-11.4.5.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://cxsecurity.com/issue/WLB-2020100161Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/159763/Icewarp-WebMail-11.4.5.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://cxsecurity.com/issue/WLB-2020100161Exploit, Third Party Advisory

Published

Nov 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27976osCommerce Phoenix CE before 1.0.5.4 allows OS command injec…9.8
• CVE-2020-27977CapaSystems CapaInstaller before 6.0.101 does not properly a…7.8
• CVE-2020-27978Shibboleth Identify Provider 3.x before 3.4.6 has a denial o…7.5
• CVE-2020-2798Vulnerability in the Oracle WebLogic Server product of Oracl…7.2
• CVE-2020-27980Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS…5.4
• CVE-2020-27981Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-27985Security Onion v2 prior to 2.3.10 has an incorrect sudo conf…7.8
• CVE-2020-27986SonarQube 8.4.2.36762 allows remote attackers to discover cl…7.5
• CVE-2020-27988Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users …5.4
• CVE-2020-27989Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Too…5.4
• CVE-2020-2799Vulnerability in the Oracle GraalVM Enterprise Edition produ…6.3
• CVE-2020-27990Nagios XI before 5.7.5 is vulnerable to XSS in the Deploymen…5.4