Skip to content
OpenAdvisories

Vendor

the-djmaze

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.0

    Multiple mXSS found in snappymail HTML parser

    Snappymail is an open source web-based email client. SnappyMail uses the `cleanHtml()` function to cleanup HTML and CSS in emails. Research discovered that the function has a few bugs which cause an mXSS exploit. Because the function allowed too many (invalid…