CVE-2021-47768

MEDIO 6.1CVE-2021-47768 · Published 15/01/2026 · updated 17/06/2026

In breve

CVE-2021-47768 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda importexporttools ng (cleidigh).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.36%, superiore al 30.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
importexporttools ng cleidigh	`= 10.0.4`	No fix yet

Description

ImportExportTools NG 10.0.4 contains a persistent HTML injection vulnerability in the email export module that allows remote attackers to inject malicious HTML payloads. Attackers can send emails with crafted HTML in the subject that execute during HTML export, potentially compromising user data or session credentials.

References

addons.thunderbird.net/en-US/thunderbird/addon/importexporttools-ng · Product
thundernest/import-export-tools-ng · Product
exploit-db.com/exploits/50496 · Exploit
vulnerability-lab.com/get_content.php · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free