Skip to content
OpenAdvisories

Vendor

postfixadmin

2 known vulnerabilities.

Products

postfixadmin 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-121551

    PostfixAdmin through 4.0.5 Stored XSS via TOTP Exception Description

    PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mailbox users to inject script by creating a TOTP exception with an unescaped description. When a global administrator views totp-exceptions.php, the scr…

    postfixadmin postfixadmin postfixadmin Ubuntu