Skip to content
OpenAdvisories

Product · the-djmaze

snappymail

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2024-45800

    Multiple mXSS found in snappymail HTML parser

    Snappymail is an open source web-based email client. SnappyMail uses the `cleanHtml()` function to cleanup HTML and CSS in emails. Research discovered that the function has a few bugs which cause an mXSS exploit. Because the function allowed too many (invalid…

    the-djmaze snappymail