Skip to content
OpenAdvisories

Vendor

cypht-org

3 known vulnerabilities.

Products

cypht 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-113583

    Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.js

    Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt text or URL values in an HTML email's external image tag when ALLOW_EXTERNAL_IMAG…

    cypht-org cypht
  • Medium 6.1
    CVE-2026-73524

    Cypht < 2.12.2 XSS via FROM Email Header in Contacts Module

    Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious payloads within angle brackets in the FROM email header. The sanitization logic re…

    cypht-org cypht