CVE-2021-47768

MEDIUM 6.1CVE-2021-47768 · Published 15/01/2026 · updated 17/06/2026

In short

CVE-2021-47768 is a MEDIUM (CVSS 6.1) vulnerability affecting importexporttools ng (cleidigh).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
importexporttools ng cleidigh	`= 10.0.4`	No fix yet

Description

ImportExportTools NG 10.0.4 contains a persistent HTML injection vulnerability in the email export module that allows remote attackers to inject malicious HTML payloads. Attackers can send emails with crafted HTML in the subject that execute during HTML export, potentially compromising user data or session credentials.

References

addons.thunderbird.net/en-US/thunderbird/addon/importexporttools-ng · Product
thundernest/import-export-tools-ng · Product
exploit-db.com/exploits/50496 · Exploit
vulnerability-lab.com/get_content.php · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free