CVE-2026-23612

Name of the Vulnerable Software and Affected Versions GFI MailEssentials AI versions prior to 22.4

Description GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting issue in the IP DNS Blocklist configuration page. An authenticated user can inject HTML/JavaScript into the ctl00$ContentPlaceHolder1$pv1$TXB IPs parameter of the /MailEssentials/pages/MailSecurity/ipdnsblocklist.aspx API endpoint. This input is stored and subsequently displayed within the management interface, enabling script execution within the context of a logged-in user.

Recommendations Update GFI MailEssentials AI to version 22.4 or later.