CVE-2026-23611: GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS
GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the IP Blocklist management page. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$txtIPDescription parameter to /MailEssentials/pages/MailSecurity/ipblocklist.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23611?
CVE-2026-23611 is classified as a medium severity vulnerability due to its potential for exploitation via stored cross-site scripting.
How do I fix CVE-2026-23611?
To fix CVE-2026-23611, upgrade GFI MailEssentials AI to version 22.4 or later.
What type of attack does CVE-2026-23611 enable?
CVE-2026-23611 enables a stored cross-site scripting attack, allowing an attacker to inject malicious scripts.
Who is affected by CVE-2026-23611?
CVE-2026-23611 affects authenticated users of GFI MailEssentials AI versions prior to 22.4.
Where does CVE-2026-23611 occur within the application?
CVE-2026-23611 occurs on the IP Blocklist management page of GFI MailEssentials AI.