Skip to content
OpenAdvisories

Vendor

Jinnrry

2 known vulnerabilities.

Products

PMail 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-129168

    PMail 2.9.1 through 2.9.8 contains a stored cross-site scripting vulnerability because the /attachments/{id}/{cid} endp…

    Jinnrry PMail
  • Medium 5.4
    CVE-2026-129169

    PMail 2.5.0 through 2.9.8 Stored XSS via /api/email/send HTML Body

    PMail 2.5.0 through 2.9.8 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by sending unsanitized HTML through /api/email/send. Attackers can embed event-handler payloads like img onerror that execute when…

    Jinnrry PMail