Cross-site scripting (XSS) vulnerability in check_login.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mailbee_webmail | Afterlogic | 3.4 (including) | 3.4 (including) |