Description
Cross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers to execute arbitrary Javascript via archived messages.
References
- 14573 vdb-entry
- http://mojo.skazat.com/download/testing_2_10_0_alpha1.html
- 16435 third-party-advisory