Vendor
the-djmaze
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.0
Multiple mXSS found in snappymail HTML parser
Snappymail is an open source web-based email client. SnappyMail uses the `cleanHtml()` function to cleanup HTML and CSS in emails. Research discovered that the function has a few bugs which cause an mXSS exploit. Because the function allowed too many (invalid…