CVE-2020-11734 (cybermail)

cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter.

Source: CVE-2020-11734 (cybermail)