Description
Multiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) links and (2) images.
References
- http://terra.calacode.com/mail/docs/changelog.html
- atmail-readmsg-xss(34376) vdb-entry
- 24260 vdb-entry
- 25506 third-party-advisory
- 36826 vdb-entry