CVE-2018-14950 The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack.
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squirrelmail | <= 1.4.22 | No fix listed |
References
- www.openwall.com mailing-list third-party-advisory
- bugs.debian.org issue-tracking mailing-list third-party-advisory
- FEDORA-2019-ad02f64a79 vendor-advisory
- FEDORA-2019-1a87523729 vendor-advisory
- sourceforge.net exploit issue-tracking patch third-party-advisory